Uruguay issues Decree 64/020 on data protection
17 Feb 2020
Uruguay issues Decree 64/020, introducing breach notification, DPO duties and privacy by design.
Insights for North, Central, and South America, and the Caribbean.
Uruguay issues Decree 64/020, introducing breach notification, DPO duties and privacy by design.
A New York Times investigation reveals Clearview AI, whose face search tool built from billions of scraped photos is used by US police.
The CCPA gives Californians rights to know, delete and opt out of the sale of their personal information.
California now requires connected devices to have reasonable security features, such as unique passwords, effectively ending default passwords.
The Cayman Islands’ GDPR-style Data Protection Law takes effect.
FIPS 140-3 becomes effective, updating US federal security requirements for cryptographic modules and aligning with ISO/IEC 19790.
Capital One discloses that a hacker accessed data on around 106 million people in the US and Canada from its cloud environment.
The US Federal Trade Commission orders Facebook to pay $5 billion and accept new privacy oversight after the Cambridge Analytica scandal.
Health Canada finalises its guidance on pre-market cyber security requirements for medical device licence applications.
Illinois’ top court has held that individuals need not show actual harm to sue under the Biometric Information Privacy Act.
SOC 2 reports for periods ending on or after 15 December 2018 must use the AICPA’s 2017 Trust Services Criteria.
Ohio now gives organisations with a recognised cybersecurity framework an affirmative defence against data breach tort claims.