Brandi M. Bennett, CIPP-US’ Post

The Oregon Consumer #Privacy Act goes into effect today (along with Texas's privacy law - see my post from last week for more on that)! As the number of state #privacylaws grows, so does exposure to privacy-related risks for regulated companies. Now more than ever, it's worth periodically taking stock of your compliance measures, like keeping your privacy policy up to date, ensuring your sale/share opt out mechanism works correctly, conducting any required #DPIAs, and ensuring you're set up to process consumer requests in a timely manner. The trail toward privacy compliance can be bumpy. Having an up-to-date map of your compliance measures can help you plan ahead for any rivers you need to ford or mountains you need to climb. #privacycompliance #dataprotection #dataprotectionlaws #privacypros #usprivacylaws #OCPA #riskmanagement #datamapping #privacymanagement #dataprivacy

🇺🇸 While there is still no federal privacy law in the U.S., many privacy laws are being introduced at a state level. On December 31, 2023, the Utah Consumer Privacy Act went into effect, and it may affect you even if you're not in Utah. Rick Cantu, our US Country Manager, discusses the new requirements in this 1-minute privacy compliance update 👇 Want to learn more? Check our guide: https://lnkd.in/dAhFehjR #UCPA #dataprotection #dataprivacy #privacy #aboutiubenda #ateambluebrand team.blue

Tune in to the California Privacy Protection Agency (CPPA) Board meeting tomorrow, January 12th, at 10am PST to hear about their priorities for spring 2024! For now, the CPPA’s draft plan emphasizes that the CPPA will "vigorously enforce privacy laws" and will adjust enforcement based on types of consumer complaints. Make sure you’re listening to, and addressing, your customer complaints! For reference, CPPA’s strategic plan timeline is as follows: ✅ May - July 2023: Discovery ✅ August - September 2023: Environmental Scan ⬜ October 2023 - January 2024: Develop preliminary strategic plan ⬜ February 2024: Publish plan ⬜ February 2024 - onward: Implement plan CCPA January 12th meeting information: https://lnkd.in/ggr6ZffQ #cppa #privacy

Join Kelly Hollingsworth + Alexandra Haywood (Chitwood) for a free webinar 4/23 on navigating the evolving landscape of #privacy regulations + maintaining #compliance in an era of increasing scrutiny.

In LexisNexis Pacific's Privacy Law Bulletin, Alec Christie looks at changes to Australia's Privacy Act, highlighting that "in order to meet both the announced changes to the Privacy Act as well as requirements under the existing law, organisations should start by independently assessing their existing privacy practices, procedures and systems to ensure they are compliant". Find out more here 👉 Organisational accountability (APP 1.2) brought back to life by the A-G’s Privacy Review — boards beware! — (2024) 21(3) PRIVLB 63 (lexis.com) #Privacy #Data #Compliance #Risk

With different privacy regulations in every country, business owners have their hands full when it comes to legal compliance. Let’s look at a couple challenges you can expect. https://bit.ly/47xH96c #PrivacyLaws #PrivacyCompliance #Privacy

California businesses, this could affect you! The California Privacy Protection Agency has published draft regulations that would regulate a business’ use of automated decisionmaking technology, or ADMT, potentially giving consumers even more control over how their personal information is processed. Here’s what you can expect if these draft regulations become law: https://hubs.li/Q02c5-Sj0 #usa #us #ccpa #california #cppa #californiaconsumerprivacyact #dataprivacy #consumerprivacy #personaldataprotection #privacynewsbites #dataprotection #usprivacylaws #privacynews #admt #automateddecisionmaking #optout

Want to step into a minefield in business? 💣 Try navigating U.S. state privacy laws alone. As a data privacy lawyer who's defended industry giants from privacy investigations and litigations, my strong advice is: don't wing it. ❌ Here's a practical approach for businesses to get a better grip on privacy documentation while sidestepping potential pitfalls: 1. Conduct Comprehensive Audits: Regularly assess your data handling against each state's laws. This isn't just a check-box exercise; it's a crucial strategy to pinpoint and address potential compliance gaps. 2. Tailor Your Documents: Customization is vital. Develop privacy policies, DPAs and other required documents that meet the unique requirements of each federal, state and country law you are subject to. 3. Stay Informed: Laws are constantly evolving. Keep up-to-date with the latest changes to ensure ongoing compliance. Need guidance? Follow me for more privacy tips. #DataPrivacy #LegalCompliance #PrivacyLaw #Privacy

Duty of care established through US comprehensive state privacy laws: Some requirements among U.S. comprehensive state privacy laws are establishing a duty of care, a concept that asks for proper due diligence before processing personal data. IAPP Westin Fellow Anokhy Desai, CIPP/US, CIPM, CIPT, and Hintze Law Partner Sam Castic, CIPP/US, CIPM, FIP, PLS, explore how the 12 current state laws set this duty and how companies can comply while also explaining how the standard differs from a duty of loyalty. Full story #dataprotection #dataprivacy #privacy

With different privacy regulations in every country, business owners have their hands full when it comes to legal compliance. Let’s look at a couple challenges you can expect. https://bit.ly/46zhklt #PrivacyLaws #PrivacyCompliance #Privacy