Client updates /  Data protection

Developed for over two years, the American Privacy Rights Act proposes establishing a nationwide standard for privacy and data security, to empower individuals to control their personal information, as part of their right to privacy.

Uber’s insufficiently clear privacy protection policy and lack of transparency about the collection of personal information on its employees resulted in a heavy fine.

2023 trends are expected to continue in 2024, including the constantly evolving regulation of AI tools and new privacy protection and data security issues, as well as attempts by Israeli and global authorities to keep up with the pace at which technology is evolving and changing the face of the business world.

The state of emergency the State of Israel has declared in recent days requires us all to contend with a unique and complex situation. As part of this struggle, many companies and organizations have instructed their employees to shift to working from home, thus requiring such employers to clarify their privacy and business data protection procedures.

The new arrangement for transferring information about EU citizens to the United States offers European and foreign companies a simpler mechanism to enable their privacy protection procedures to be recognized as GDPR-compliant.

The regulations grant several new rights to the relevant data subjects, when the database contains information transferred from the European Economic Area (EEA) to Israel, including the data subject’s right to delete information and a broader right of review.

This declaration will help to maintain the European Union’s continuing recognition of the State of Israel as a country whose data protection laws are on par with the European Data Protection Regulation.

The Israeli Privacy Protection Authority issues instructions to report data breach events or concerns of data breach events immediately.

Sephora, the cosmetics giant of the LVMH group, must pay a USD 1.2 million fine for failure to comply with the California Consumer Privacy Act (CCPA), after receiving a warning from the California Attorney General and time to rectify its violations.

The publication presents the PPA’s position on the duty to inform on the collection and use of personal data (as derived from the Privacy Protection Law), specifically highlighting the duty to inform when using algorithm-based or AI-based decision-making systems.

The draft bill is an important step toward achieving the objectives set by the Privacy Protection Authority and the government to increase privacy protection.

A July decision by the Court of Justice of the European Union has established that in light of the fact the United States does not respect the privacy of its citizens in accordance with EU standards, the Privacy Shield mechanism allowing for personal data transfers between Europe and the US can no longer be relied upon. At the same time, in Israel, the Ministry of Justice has published a memorandum that constitutes the first step in adjusting existing law to the digital age.