Mayer Brown organized and hosted a meeting of the IAPP Brussels KnowledgeNet Chapter. With as title, “Is Certification the Future of Privacy? Yes, No, Maybe?”, the meeting discussed the interplay between cybersecurity and data privacy in order to highlight the actual relevance of the cybersecurity frameworks to the work of privacy professionals. The audience heard

On January 7, 2020, the White House issued a draft memorandum setting forth proposed principles for agencies to follow when regulating and taking non-regulatory actions affecting artificial intelligence (AI) in the private sector.1 The principles provide a road map for agencies to achieve objectives first described in the Trump administration’s Executive Order on Maintaining

On January 14, the French data protection authority (the “CNIL”) released a proposal for a set of practical requirements for placing cookies in web-based and mobile application environments (the “Recommendations”).

The Recommendations1 follow the CNIL’s publication in July 2019 of guidelines summarizing the applicable cookies framework and its later consultation with stakeholders in the

California Attorney General Xavier Becerra recently released proposed regulations for the California Consumer Privacy Act of 2018 (“CCPA”), which expand upon and provide further details on the rights and obligations created by the CCPA. The CCPA requires the attorney general to adopt regulations to further the CCPA’s purposes and provide guidance to businesses on how

Almost immediately after the passage of the California Consumer Privacy Act (“CCPA”), lawmakers proposed both large and small amendments to it. On September 13, 2019, California’s legislative session came to a close and with it the last chance for the California legislature to pass amendments to the CCPA before it comes into effect on January

The California Consumer Privacy Act (“CCPA”) will impact how insurers collect, store, sell and process the personal information of California consumers. Other US states are likely to soon follow suit—there are currently at least 11 other states with pending privacy laws that incorporate CCPA-like concepts and requirements. In this Legal Update, we examine the history

On April 16, 2019, the staff from the Office of Compliance Inspections and Examinations (the “OCIE”) of the US Securities and Exchange Commission (“SEC”) published a Risk Alert describing privacy and related customer information safeguarding issues it has identified in recent examinations of registered investment advisers and broker-dealers (“Registered Entities”).1 These issues continue to

On March 5, 2019, the Federal Trade Commission (“FTC”) proposed a number of revisions to its Gramm-Leach-Bliley Act (“GLBA”) regulations, which would (i) change the Safeguards Rule to require financial institutions to implement specific information security controls (in a departure from the FTC’s current non-prescriptive approach to data security), (ii) update its GLBA Privacy Rule