Image of gears directing arrows to shield.

California Consumer Privacy Act vs GDPR – How to Maximize Your Privacy Compliance Program

California Privacy Law, GDPR, Privacy Law , , , , ,

California’s recent passage of the Consumer Privacy Act of 2018 now places the world’s fifth-largest economy under European style data protection rules. Given the new law, US businesses that were previously hesitant to implement GDPR are now reconsidering their position.

Luckily, the GDPR and the California Consumer Privacy Act (CCPA or CaCPA) share some similarities. Both provide for consumer-facing privacy notices, data access rights, and data portability. As businesses automate their GDPR compliance processes, they should also leverage those same processes under the CaCPA to save significant time and expense.

Below, we have listed five common operational steps that all businesses should take in their GDPR and CaCPA privacy compliance programs:

Read More
Drones hovering over ocean view

Regulating the Skies – FAA Drone Rules for Hobbyists

Drones, Privacy Law , , , , ,

In 2012, Congress placed the Federal Aviation Administration (“FAA”) in charge of regulating small unmanned aircraft systems, also known as drones. In response, the FAA promulgated regulations in 2015 and 2016 targeting the drone industry. These regulations required operators to register their systems and meet minimum safety and certification requirements, but excluded operators of preexisting model aircraft.

So far, hobbyist drone operators have used the model aircraft exclusion to temporarily block drone registrations, relying on a D.C. Circuit court opinion by Judge Brett Kavanaugh in May of 2017. Trump signed a bill reinstating the registration requirement in December 2017, however. In addition, a recent court ruling out of the D.C. Circuit Court of Appeals, Taylor v. Federal Aviation Administration (Case No. 16-302), upheld the FAA’s ability to regulate hobby drone operators.

Read More
Image of man preaching

EU Court Finds GDPR Applies to Religious Preaching

GDPR, Non-Profits, Privacy Law , , , , , ,

On July 10, 2018 the Court of Justice of the European Union (CJEU) published an opinion finding that the General Data Protection Regulation (“GDPR”) applied to the collection of personal data during “door-to-door” preaching by the Jehovah’s Witnesses religious community. This data included the name and addresses of individuals contacted, and in certain cases, the individuals’ religious beliefs and family circumstances. Members of the Jehovah’s Witnesses community used this data to coordinate preaching efforts across territories and to maintain lists of individuals who did not wish to be visited.

The judgment in this case (CJEU C-25/17) highlights the broad scope of the GDPR in several ways. First, it shows the limitation of the “personal or household” exception to the GDPR.

Read More
1 2 3 4