Privacy Law

New Zealand’s New Privacy Law 2020 is Now in Force

New Zealand has meaningfully updated its privacy law,  The Privacy Act 2020, which took force December 1.  The new Privacy Act 2020 is a significant advancement of New Zealand’s privacy law, and encompasses numerous changes, including:  Data Breach Reporting Obligations: There are new reporting obligations for data breaches. Companies are required to notify the Office

Expert Commentary: Kenya follows the path of European-style Data Protection

Guest Post by Dr. Isaac Rutenberg, Director and Senior Lecturer, Centre for Intellectual Property and Information Technology Law, Strathmore University, Nairobi, Kenya. On the 8th of November, the President of Kenya signed into law the Data Protection Act 2019. This action completed a process that spanned more than a decade, and allows Kenya to enter a new phase with respect to the evolving centricity and treatment of data in society. This article looks at the content of the Act, highlights important and interesting provisions, and concludes with predictions as to the implementation.

WPF Discussion Draft: Consumer Privacy and Data Security Standards Act of 2019

The World Privacy Forum has published its discussion draft privacy bill that provides rules of the road for standards setting in the area of data privacy and security. The discussion draft sets forth a pathway to creating voluntary consensus standards to facilitate granular and contextual standard-setting focused on privacy and security issue areas.  Voluntary consensus standards

The Profound Implications of U.S. v. Microsoft

In the world of privacy and global digital communications, the case of the United States v. Microsoft is a big deal. In June 2016 Microsoft won a victory in the case in the U.S. 2nd Circuit. This week, the U.S. Supreme Court surprised many when it announced that it granted a petition to review Microsoft’s

Europe has reached agreement on new Data Protection Regulation

After four years of negotiations, the EU Commission, Parliament, and Council have reached a final agreement on the General Data Protection Regulation (GDPR). The GDPR is an omnibus data protection law which sets arguably the most extensive data protection laws globally, along with strong enforcement authority. The new law contains many new provisions that move