Clients updates / Privacy Law

Developed for over two years, the American Privacy Rights Act proposes establishing a nationwide standard for privacy and data security, to empower individuals to control their personal information, as part of their right to privacy.

The French Data Protection Authority (CNIL) fined a corporation for violation of the GDPR due to flaws in its personal data collection and user consent practices, even though the data was collected by a third party.

The court’s decision to start enforcement proceedings, in addition to the provisions of the California Consumer Privacy Act (CCPA) already being enforced, is expected to lead to a significant increase in enforcement against companies that fall in the scope of the CCPA.

Uber’s insufficiently clear privacy protection policy and lack of transparency about the collection of personal information on its employees resulted in a heavy fine.

2023 trends are expected to continue in 2024, including the constantly evolving regulation of AI tools and new privacy protection and data security issues, as well as attempts by Israeli and global authorities to keep up with the pace at which technology is evolving and changing the face of the business world.

While AI tools offer significant contributions to businesses, even non-technological ones, it’s crucial to understand the potential exposures these tools may present. This guide emphasizes the importance of conducting examinations and implementing AI tools in a legal and transparent manner.

The Regional Labor Court in Tel Aviv has recognized an employee’s resignation as tantamount to dismissal under the law due to the employer’s use of surveillance cameras around the employee’s workstation in a manner inconsistent with the Privacy Protection Authority’s guidelines and the court’s position in such matters.

The EU Data Act will supervise companies that manufacture and supply smart devices (IoT devices) and companies that handle data collected by these devices, as well as enact a series of regulations designed to protect consumer privacy.

Israel’s government has drafted new regulations in the wake of Operation Swords of Iron, due to the increase in the scope and quality of cyberattacks against civilian entities.

The United States is looking to institute rules for the safe development and use of artificial intelligence, to regulate government use of AI, and to establish its leadership in the AI field.

The new UK Online Safety Act is part of a wave of European legislation seeking to protect children from online age-inappropriate content, exploitation, and other online dangers.

The state of emergency the State of Israel has declared in recent days requires us all to contend with a unique and complex situation. As part of this struggle, many companies and organizations have instructed their employees to shift to working from home, thus requiring such employers to clarify their privacy and business data protection procedures.

The Israeli Privacy Protection Authority recently published a draft directive that imposes the responsibility for fulfilling certain obligations on the board of directors, including the obligation to appoint an officer responsible for compliance with the Privacy Protection Regulations

Employers’ use of technological tools to track their employees’ geolocations has sharply increased in recent years, as remote work has become more prevalent. The Israeli Privacy Protection Authority recently published its recommendations on the collection of geolocation data from employees’ vehicles.

The new arrangement for transferring information about EU citizens to the United States offers European and foreign companies a simpler mechanism to enable their privacy protection procedures to be recognized as GDPR-compliant.

Who is responsible for protecting the privacy of the information AI technologies collect? A new class action in California joins a series of AI-related lawsuits that may clarify this question.

Employers that want to use technological surveillance measures to monitor and track employee performance remotely must be diligent about formulating a clear policy, informing employees, and using these means reasonably and proportionately.

An EUR 1.2 billion fine was imposed on Meta after the EDPB ruled the company was systematically transferring the personal data of millions of Facebook users from the European Union to servers in the United States in violation of the European GDPR.

The regulations grant several new rights to the relevant data subjects, when the database contains information transferred from the European Economic Area (EEA) to Israel, including the data subject’s right to delete information and a broader right of review.

A few months after ChatGPT became a popular tool for millions of users, users began filing lawsuits alleging violations of users’ privacy and data security breaches. The conclusions from these lawsuits are relevant to all companies engaging in the development and assimilation of AI technologies.