: This work is aimed at initiating of discussion and developing a general theory of privacy law. The author suggests beginning with classification of legal relationships arising in privacy sphere, as a first step toward identifying the flaws in privacy rulemaking and law application. The relational theory of law, underlying this work, explains why each privacy legal relationship will take its own direction and will form an object in a unique way. The method used in this work is classification of legal relationships using the bases adopted from theory of civil law. The work identifies at least nine types of privacy legal relationships, interpret them, shows them as a correlated system, highlights the patterns of their existence and draws parallels between some institutions of civil law and privacy law. Also, the concept of legal relationships discovers many mysteries of theory privacy law and teaches us what is the object of subjective privacy right, what subjective obligations actually has a data controller an[...]
: Brussels, 09 October - The European Data Protection Board (EDPB) and the European Commission endorsed joint guidelines on the interplay between the Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) . These are the first joint guidelines by the Board and the European Commission. In line with its 2024-2027 Strategy and the recent Helsinki Statement’s objectives to make GDPR compliance easier and strengthen consistency, the EDPB has cooperated with the European Commission, each within their respective mandates, to facilitate the coherent application of the DMA*and GDPR and to increase legal certainty for gatekeepers, business users, beneficiaries and individuals. EDPB Chair Anu Talus said: “These joint guidelines are the result of a fruitful cooperation between the EDPB and the European Commission. This is the first time that the EDPB and the European Commission prepare guidelines jointly. This approach maximises usefulness of the guidance by simplifying compliance for businesses and[...]
: The FTC's Google settlement: What's the buzz? wfg-adm109 April 1, 2011 | 4:28PM The FTC's Google settlement: What's the buzz? By Lesley Fair “Sweet! Check out Buzz.” “Nah, go to my inbox.” That was the intriguing choice facing Gmail users last year when Google launched Google Buzz, its social network. But according to a settlement announced this week by the FTC, the company violated the privacy promises it made to Gmail users and used deceptive tactics in the Buzz rollout. The story starts with Google’s privacy policy. From October 2004 until October 2010, Gmail users were told, "Gmail stores, processes and maintains your messages, contact lists and other data related to your account in order to provide service to you." On the subject of the choices users had about the use of their personal information in all of Google’s products, including Gmail, the privacy policy said, "When you sign up for a particular service that requires registration, we ask you to provide personal information. If we use this inform[...]
: i-Dressup and a data security mess-up lfair April 24, 2019 | 3:08PM i-Dressup and a data security mess-up By Lesley Fair Kids love to play dress-up, but parents wouldn’t want them rummaging through the attic or climbing to the top shelf of the wardrobe without permission and proper supervision. The i-Dressup.com website offered users – including children – a virtual way to play dress-up and design clothes without those potential dangers. But according to an FTC complaint, Unixiz, Inc. , the company behind i-Dressup, violated the Children’s Online Privacy Protection Act in ways that created different kinds of risks. COPPA puts two separate sets of protections in place to help keep parents in control of personal information collected from their kids online. First, COPPA-covered companies must clearly disclose their information policies and get parental consent before collecting personal information from children under 13. Second, companies must provide reasonable and appropriate security for the data they coll[...]
: Brussels, 12 September - During its September plenary meeting, the European Data Protection Board (EDPB) has adopted guidelines on the interplay between the Digital Services Act (DSA) and the General Data Protection Regulation (GDPR) . These are the first set of EDPB guidelines on the interplay between the GDPR and the EU’s recently adopted digital laws. The DSA aims to complement the rules of the GDPR to ensure the highest level of protection of fundamental rights in the digital space. Its main goal is to create a safer online environment in which the fundamental rights of all users, including the right to freedom of expression, are protected. It applies to online intermediary services , such as search engines and platforms. Several provisions included in the DSA entail the processing of personal data by intermediary service providers. The EDPB guidelines contribute to the consistent application of the DSA and of the GDPR, insofar as some provisions of the DSA concern the processing of personal data by inte[...]
: Practice Fusion case suggests 6 health privacy pointers lfair June 8, 2016 | 9:01AM Practice Fusion case suggests 6 health privacy pointers By Lesley Fair Combine two of the most talked-about consumer protection topics – health privacy and consumer-generated online content – and what do you get? A proposed FTC settlement with Practice Fusion, the largest cloud-based electronic health records company in the country, and six compliance tips for others in the industry. One of San Francisco-based Practice Fusion’s primary products is an electronic records system for outpatient providers. In 2009, the company launched “Patient Fusion,” an online portal where patients whose providers were already using Practice Fusion could view or download their health information or transmit it to another provider. Patient Fusion also let patients send and receive secure messages from their providers. Fast forward several years and the company decided to expand Patient Fusion to include a public directory where current and prosp[...]