Client updates /  Privacy

Until now, the HHS guidance provided a very broad interpretation of what constituted “protected health information” (PHI). This interpretation severely restricted data analytics service providers’ ability to cater to hospitals and for hospitals to manage their digital assets, in addition to exposing them to class action lawsuits. A federal court’s ruling to vacate the guidance is expected to facilitate both service providers and hospitals.

Uber’s insufficiently clear privacy protection policy and lack of transparency about the collection of personal information on its employees resulted in a heavy fine.

2023 trends are expected to continue in 2024, including the constantly evolving regulation of AI tools and new privacy protection and data security issues, as well as attempts by Israeli and global authorities to keep up with the pace at which technology is evolving and changing the face of the business world.

The Regional Labor Court in Tel Aviv has recognized an employee’s resignation as tantamount to dismissal under the law due to the employer’s use of surveillance cameras around the employee’s workstation in a manner inconsistent with the Privacy Protection Authority’s guidelines and the court’s position in such matters.

The EU Data Act will supervise companies that manufacture and supply smart devices (IoT devices) and companies that handle data collected by these devices, as well as enact a series of regulations designed to protect consumer privacy.

The state of emergency the State of Israel has declared in recent days requires us all to contend with a unique and complex situation. As part of this struggle, many companies and organizations have instructed their employees to shift to working from home, thus requiring such employers to clarify their privacy and business data protection procedures.

Who is responsible for protecting the privacy of the information AI technologies collect? A new class action in California joins a series of AI-related lawsuits that may clarify this question.

A few months after ChatGPT became a popular tool for millions of users, users began filing lawsuits alleging violations of users’ privacy and data security breaches. The conclusions from these lawsuits are relevant to all companies engaging in the development and assimilation of AI technologies.

The more artificial intelligence permeates additional spheres of private and public life, the greater the need to regulate uses of this technology. Various artificial intelligence regulations are already in place around the world and additional regulatory initiatives are being promoted at a rapid pace.

The Israeli Privacy Protection Authority recently published a document presenting its position and recommendations on the privacy protection aspects pertinent to waivers of medical confidentiality and disclosures of medical information during the hiring process.

In an expanded panel of nine justices, Israeli Supreme Court prescribed a set of rules concerning procedures and judicial discretion on the granting of search warrants of computers and cellular devices as part of an investigation. 

Israel’s Privacy Protection Authority has published its recommendation that every organization appoint a privacy protection supervisor. This supervisor’s task is to implement the privacy protection laws that apply to the organization. The PPA noted that although Israeli law does not impose such a duty, it is a best practice recommended for organizations that collect and analyze personal data.

A July decision by the Court of Justice of the European Union has established that in light of the fact the United States does not respect the privacy of its citizens in accordance with EU standards, the Privacy Shield mechanism allowing for personal data transfers between Europe and the US can no longer be relied upon. At the same time, in Israel, the Ministry of Justice has published a memorandum that constitutes the first step in adjusting existing law to the digital age.

The global effort to fight the spread of coronavirus has prompted new privacy related questions around the world. Much has been written for and against the use of privacy-compromising measures to protect public health. Therefore, we have chosen to concentrate on the practical implications of privacy principles on companies and businesses.

The Israeli National Cyber Security Authority published recommendations for business and organizations related to privacy protections and data security for telecommuting due to coronavirus spread.

July 2019 brought an escalation in the enforcement of privacy infringements by companies around the world. These events underscore the trend that began with the GDPR taking effect and should lead any business entity coming across personal information.

Recently, the UK Information Commissioner’s Office decided to take action against a non-European entity following an alleged breach of the GDPR.

Within the scope of a new directive published recently by the database registrar at the Israeli Law, Information and Technology Authority, entities, such as service-providers, that retain recordings of telephone conversations or chat correspondence with their customers will be forced to enable their customers (the subjects of the information) to also access information of this type. This according to the right of access prescribed in the Privacy Protection Law and the regulations instituted by virtue thereof.