Last Month in Privacy: January 2021
February 09, 2021
Data Privacy Day
Data Privacy Day was celebrated this month on 28 January. The date marks the anniversary for when the Council of Europe's Convention 108, the first legally binding international treaty for privacy and data protection, was opened for signature. Various data protection authorities released statements to help raise awareness and to celebrate the protection of personal data. OneTrust and the global PrivacyConnect Community also hosted a series of Expert Panels and released a number of resources to help you celebrate the day, which you can access here.
States continue to introduce privacy bills
Several States introduced privacy bills, including New York, Virginia, Oklahoma, Washington and Indiana. New York was particularly active, reintroducing bill for the New York Privacy Act, the Right to Know Act of 2021 and the Online Consumer Protection Act. In addition, bills have also been introduced to regulate the sale of consumer personal information to third parties; biometric privacy; and the collection of emergency health data and personal information and the use of technology to aid during the COVID-19 pandemic.
EDPB and EDPS adopt joint opinions on Commission's draft SCCs
The European Data Protection Board and the European Data Protection Supervisor adopted joint opinions on the European Commission's draft Standard Contractual Clauses. Several amendments were requested in order to bring more clarity to the texts. The EDPB and EDPS also suggested that the Annexes to the SCCs clarify the roles and responsibilities of each of the parties as much as possible with regard to each processing activity as any ambiguity would make it more difficult for controllers or processors to fulfil their obligations under the accountability principle. We now await finalised version of the SCCs and the EDPB's recommendations on supplementary measures. I'll be back next month for another round up of regulatory developments.
In the meantime, you can join the discussion by taking part in you local PrivacyConnect Chapter, and by visiting www.privacyconnect.com.