Client updates / Regulation

The Black Shadow hacking group’s attack on Cyberserve, reported a few days ago, has resulted (at this point in time) in the leaking of a database with more than 800,000 records pertaining to various individuals and the exposure of additional databases. This attack raises important questions about the relations between database owners and the third parties with whom they engage to receive various services relating to business activities that incidentally involve their data.

On November 1, 2021, the new Chinese Personal Information Protection Law (PIPL) will come into effect. This law is modeled after the well-known European General Data Protection Regulation (GDPR).

Like the GDPR, the PIPL will apply not only to Chinese organizations, but also to any organization processing the personal information of people located in China.

Therefore, any organization that collects data from China must comply with this new law or risk suffering the consequences.

There has been an uptrend in recent years of employers using a variety of technological tools to supervise their employees and oversee the quality of their work. The use of these tools has become more prevalent due to the shift of many organizations to working from home last year.

E-commerce giant Amazon reported in its financial statements at the end of last month that the Luxembourg data protection authority had imposed on it a fine totaling EUR 746 million. The fine appears to have been laid on Amazon for its use of users’ personal data for targeted advertising, in violation of the EU’s General Data Protection Regulation (GDPR).

Dozens of motions were filed in recent weeks to certify class actions against some of the most well-known and leading publicly traded companies and reporting corporations in Israel. These motions to certify class actions are similar in nature (apart from the different defendants) and most were filed by the same plaintiffs-petitioners and through the same attorneys.

The Ministry of Environmental Protection recently published the Memorandum for the Climate Law 2021. The memorandum’s main purpose is to create an organizational framework for Israel’s handling of the global climate crisis. It follows the developing trend among countries worldwide that have enacted similar climate legislation. According to the memorandum, handling the crisis shall occur on two primary levels. The first is prevention and minimization of greenhouse gas emissions in order for Israel to meet its international obligations under the Paris Agreement. The second is advancing national preparedness for the impacts and harms of the climate crisis.

The Bank of Israel published its latest annual review at the end of May. The review includes an announcement by Supervisor of Banks Yair Avidan that he is promoting the formulation of updated comprehensive regulations on environmental risk management, considering the considerable importance he attributes to the subject of the environment.

On June 1, 2021, the regulations that guided the conduct of workplaces during the coronavirus crisis expired. Accordingly, from this day forward, there is no longer a requirement to operate in accordance with the green tag or purple tag directives in the workplace. At this stage, holding gatherings, professional trainings, and group meals at the workplace is permitted, even without observing social distancing.

In light of global capital market investors’ growing interest in the topic of responsible investments, the Israel Securities Authority recently published a proposed outline for corporate responsibility and ESG risk disclosures.

This past year has been nothing short of a rollercoaster ride for employers in Israel, in terms of both their business activities and their role as employers. Now, when we can perhaps see a glimmer of light at the end of the tunnel in the form of Israel’s vaccination campaign, quite a few questions arise.

When competing entities join forces to submit a tender offer, it reduces the overall number of entities competing for a tender. Reducing the number of competing entities may increase the market power of those participating entities against the tender holder and enable them to make less attractive offers.

The Israel Securities Authority recently established guidelines on when a cryptographic currency (token) is considered a security. The ISA determined that Kirobo tokens meet the definition of a security. This is primarily because the The Israel Securities believes investors would intend to purchase the tokens for financial purposes. In addition, these investors would anticipate their holdings to go up in value.

Israel’s Ministry of Environmental Protection imposed a financial sanction of NIS 634,000 on Bazan Group’s Gadiv Petrochemical Industries for not complying with a deadline to stop harmful emissions. The ministry stated that due to the severity of the violation, both a financial sanction and administrative enforcement measures would be imposed.

A recent amendment to the Consumer Protection Law seeks to place restrictions on telemarketing. As part of the amendment, the Consumer Protection and Fair Trade Authority will establish a database of consumers who don’t want to receive telemarketing calls from various businesses. Businesses will not be able to contact a consumer whose telephone number is registered in this database, except in specific circumstances.

While the activity of most financial intermediaries in Israel is regulated and supervised, broker-dealers have so far operated in an unsupervised manner and without dedicated regulation. In light of this, the Israel Securities Authority has published a legislative memorandum aimed at regulating the field of broker-dealers in Israel.

Israel’s Privacy Protection Authority has published its recommendation that every organization appoint a privacy protection supervisor. This supervisor’s task is to implement the privacy protection laws that apply to the organization. The PPA noted that although Israeli law does not impose such a duty, it is a best practice recommended for organizations that collect and analyze personal data.

The European Parliament recently adopted a new regulation on crowdfunding platform activity. This regulation will apply across the board to all European Union countries. According to the new regulation’s provisions, it is possible to raise up to only EUR 5 million on a crowdfunding platform. Additionally, the regulation stipulates rules to protect people investing through a crowdfunding platform, reporting duties for the entities raising funds, and more.

A recently launched government program aims to encourage companies to publish social responsibility reports, or ESG (environmental, social, and government) responsibility reports. The Ministry of Strategic Affairs in the Prime Minister’s Office announced the launch of the “Impact Nation” program, as part of a broad move to promote publication of positive economic information regarding Israeli companies, following the publication of the Israeli companies database by UN Human Rights Council.

In early October, the Data Protection Authority in Hamburg, Germany announced that the clothing retailer H&M committed severe violations of its employees’ privacy. Because of these European General Data Protection Regulations (GDPR) violations, the retailer would pay a fine of approximately 35 million euros.