The European Union’s General Data Protection Regulation (GDPR) first launched the concept of data minimization, which states that a data controller should limit the collection of personal information ...

On March 16, 2023, the French Data Protection Agency (the “CNIL”) imposed a fine of € 25,000 on the company CITYSCOOT in connection with a finding that CITYSCOOT failed to comply with the obligation ...

As we continue to navigate an ever-changing regulatory landscape for privacy issues, organizations need to start thinking about privacy-related policies, procedures, and oversight as a must-have, not ...

The last two years were busy ones for privacy advocates. In 2020, California voters passed the California Privacy Rights Act (CCPA), a major revision of the ...

While the practice of data minimization isn't exactly new, we're now seeing it resonate and discussed at the forefront of the legal industry for the first time. At a ...

There’s a decent amount of overlap between many US state privacy laws – but there are also many significant differences. Take the Maryland Online Data Privacy Act.

States that have enacted data privacy laws and those pursuing them are migrating into disparate camps in their approaches to privacy protections, setting up a clash if Congress enacts federal ...

The letters I get from companies informing me of a data breach exposing my information vary in their apologetic language, with some groveling more than others for the carelessness. But I’ve yet to see ...

No legislation or regulation in the immediate future would require a shift from notification and consent to an approach of data minimization, as she classifies it. But it’s potentially concerning for ...