Data Privacy Frontline Reports

Data Privacy Frontline Report

Global news from the frontlines of data privacy

Stay up to date on global news and regulatory changes, including legislative predictions, interactive tools, and cutting-edge research and implementation.

No results found.

Here are some suggested resources.

  • US: There have now been over 3-dozen class action lawsuits launched in California claiming companies are using “grey market” data to match user patterns with personally identifiable information (PII), a process that’s being called “de-anonymization.”
  • India: The Indian Parliament’s lower house has passed its Digital Personal Data Protection Bill, 2023 (DPDP), obliging companies to delete personal data when the primary purpose is no longer being served.
  • Global: Data protection and privacy authorities from 12 countries have released a joint statement addressing data scraping on social media platforms and other publicly accessible sites, acknowledging the significant privacy concerns it raises.

And more…

  • Europe: The European Commission has adopted the EU-US adequacy decision, but the new framework is already poised to face a legal challenge.
  • North America: The U.S. Federal Trade Commission (FTC) has provided a long list of takeaways from recent cases, including those involving BetterHelp, GoodRx, Premom, and Vitagene.
  • Europe: The European Medicines Agency (EMA) has finalized guidance on safeguarding personal protected data (PPD) and commercially confidential information (CCI) in clinical trial filings in the European Economic Area.

And more…

  • Atlantic: The UK and US governments have announced the Atlantic Declaration. It’s the next step in developing a comprehensive partnership on data and AI and giving organizations in the UK a streamlined route for transferring data to the US.
  • Africa: Nigeria’s President has signed the Nigeria Data Protection Bill, 2023, into law, providing a legal framework for protecting personal information and the practice of domestic data protection.
  • North America: Canada’s Office of the Privacy Commissioner (OPC) provides guidance on the practice of data de-identification in a new report of findings from a completed investigation.

And more…

  • EU: Ireland’s Data Protection Commission has handed down a record fine of 1.2 billion euros to Meta Platforms Ireland in its data transfer case. This is the largest fine in the 5-year history of the EU’s GDPR.
  • Africa: The African Union Convention on Cyber Security and Personal Data Protection (the “Malabo Convention”) is set to come into force now that Mauritania has become the 15th state to submit ratification.
  • US: The stage is set for Texas to become the tenth state—and the fifth in 2023—to pass comprehensive privacy legislation.

And more…

  • US: Indiana, Montana, and Tennessee have now passed state-level privacy laws (with the MO and TN bills passing their respective legislatures on the same day), becoming the 7th, 8th, and 9th US states to do so.
  • US: Washington state’s My Health My Data Act has received final approval in the House, establishing consumer rights, consent requirements for data practices concerning personal health care information, and a private right of action.
  • UK: The IAPP has put together a comprehensive summary of the changes proposed in the UK government’s “updated and simplified” data protection laws as well as their impact in comparison to the GDPR.

And more…

  • UK: A draft data protection reform bill is before Parliament, addressing the UK’s General Data Protection Regulation. An aim of the bill is releasing British businesses from the “unnecessary red tape” associated with the EU’s GDPR.
  • US: Iowa has become the sixth US state to pass its own comprehensive consumer privacy legislation. The law is set to go into effect on January 1, 2025.
  • ISO: A new international standard for anonymization has been released and will play an important role in establishing best practices for the reuse and sharing of data about people.

And more…

Not finding what you're looking for?

Archiving / Destroying

Are you unleashing the full value of data you retain?

Your Challenges

Do you need help...

OUR SOLUTION

Value Retention

Client Success

Client: Comcast

Situation: California’s Consumer Privacy Act inspired Comcast to evolve the way in which they protect the privacy of customers who consent to share personal information with them.

Evaluating

Are you achieving intended outcomes from data?

Your Challenge

Do you need help...

OUR SOLUTION

Unbiased Results

Client Success

Client: Integrate.ai

Situation: Integrate.ai’s AI-powered tech helps clients improve their online experience by sharing signals about website visitor intent. They wanted to ensure privacy remained fully protected within the machine learning / AI context that produces these signals.

Accessing

Do the right people have the right data?

Your Challenges

Do you need help...

OUR SOLUTION

Usable and Reusable Data

Client Success

Client: Novartis

Situation: Novartis’ digital transformation in drug R&D drives their need to maximize value from vast stores of clinical study data for critical internal research enabled by their data42 platform.

 

Maintaining

Are you empowering people to safely leverage trusted data?

Your Challenges

Do you need help...

OUR SOLUTION

Security / compliance efficiency

CLIENT SUCCESS

Client: ASCO’s CancerLinQ

Situation: CancerLinQ™, a subsidiary of American Society of Clinical Oncology, is a rapid learning healthcare system that helps oncologists aggregate and analyze data on cancer patients to improve care. To achieve this goal, they must de-identify patient data provided by subscribing practices across the U.S.

 

Acquiring / Collecting

Are you acquiring the right data? Do you have appropriate consent?

Your Challenge

Do you need help...

OUR SOLUTIONS

Consent / Contracting strategy

Client Success

Client: IQVIA

Situation: Needed to ensure the primary market research process was fully compliant with internal policies and regulations such as GDPR. 

 

Planning

Are You Effectively Planning for Success?

Your Challenges

Do you need help...

OUR SOLUTION

Build privacy in by design

Client Success

Client: Nuance

Situation: Needed to enable AI-driven product innovation with a defensible governance program for the safe and responsible use
of voice-to-text data under Shrems II.

 

Join the next 5 Safes Data Privacy webinar

This course runs on the 2nd Wednesday of every month, at 11 a.m. ET (45 mins). Click the button to register and select the date that works best for you.