Data Privacy Highlights

This week we are bringing you some of the top stories in the privacy world from the CCPA to Meta video tracking.?

Don’t forget to grab your copy of WSJ, USAToday, Amazon and Barnes & Noble Best-Seller, Data Reimagined: Building Trust One Byte at a Time, written by privacy and cybersecurity experts Jodi and Justin Daniels.

Now, onto what's happening in privacy.

CPPA Board Advances Proposed CPRA Regulations

The California Privacy Protection Agency Board has advanced the modified proposed CPRA regulations. The agency aims to submit the final regulating to the Office of Administrative Law by the end of 2022.?

The board held a meeting to review and consider the modified CCPA regulation which contain many changes based on comments the Agency received during the public comment period.?

The Board has authorized the agency to take all steps necessary to prepare and notice modifications to the amendments. If all goes to plan the regulated would become effective in late January or early February.?

In addition to the new regulation on enforcement, the next set of proposed draft regulations that are submitted for the fifteen-day comment period will have a number of changes from the current modified proposed regulations including:?

1. Grammatical changes or changes intended to resolve ambiguities
2. Changes dealing with the right to limit the use of sensitive personal information, opt out preference signals, and the provisions in § 7002 dealing with purpose limitations, secondary uses and data minimization

via: https://www.bytebacklaw.com/2022/10/cppa-board-advances-proposed-cpra-regulations/

Meta Pixel’s Video Tracking Spurs Wave of Data Privacy Suits

Consumers are suing dozens of companies for sharing tracking data on what videos they watch. A wide variety of entities that host videos are facing lawsuits, including news outlets, streaming services, and sports organizations.

At least 47 proposed class actions filed since February claim that?Meta Platforms Inc.'s?Pixel tracking tool sent personal video consumption data from online platforms to Facebook without consumer consent, violating the federal Video Privacy Protection Act.

The complaints allege the video hosting entities knowingly disclosed protected information by allowing Meta’s embedded Pixel code to share viewing activity and unique Facebook ID with the social media platform.

The rising number of cases is evidence of how plaintiff’s counsels are creatively applying traditional causes of action to litigate modern privacy issues in the absence of federal consumer privacy legislation.

via: https://news.bloomberglaw.com/privacy-and-data-security/meta-pixels-video-tracking-spurs-wave-of-consumer-privacy-suits?ck_subscriber_id=1853429291

Privacy and digital health data: The femtech challenge

The Dobbs v. Jackson Women's Health?Supreme Court decision has raised the?stakes?for privacy protections of health data in the United States. The post-Dobbs privacy concerns in the femtech market highlight the complexities of today's health privacy protections and the ad tech ecosystem.

The explosion of health-related mobile apps, especially reproductive health and fertility apps, has triggered heightened privacy, law enforcement and?civil rights?concerns. State and federal entities are now responding to these concerns, as demonstrated through increased legislative efforts and enforcement actions.

The U.S. Federal Trade Commission recently?reiterated?the agency will "vigorously enforce the law if we uncover illegal conduct that exploits Americans' location, health, or other sensitive data."

Current health data laws do not address health data created outside of a clinical context, creating a?gap?in digital health privacy protections that has continued to expand with the growth of mobile health?apps?and other technologies.

Learn more the current landscape of the digital health data and femtech world: https://iapp.org/news/a/privacy-and-digital-health-data-the-femtech-challenge/

Start Your Privacy Program With PrivacyOps

Privacy can get overwhelming quickly but it's an essential business practice that needs to be prioritized. We created the PrivacyOps toolkit because privacy is complex, but it doesn’t have to be hard! This actionable and affordable solution helps operationalize practical, compliant privacy programs.?Taking advantage of a PrivacyOps toolkit will lead your business to -

1. Embrace a new way of working with data, going beyond compliance to create a privacy-first strategy that builds trust with customers while keeping your operational needs top-of-mind
2. Build an effective privacy program while avoiding the common pitfalls that waste time and money
3. Understand your obligations and your customers’ rights
4. Update your privacy notices
5. Create processes for responding to individual rights requests or data subject access requests
6. Plan and execute a data inventory
7. Design a privacy-forward marketing strategy

Learn more: https://redcloveradvisors.com/privacy-ops-package/