Last Month in Privacy: May 2022
June 07, 2022
Connecticut: Governor signs Act Concerning Personal Data Privacy and Online Monitoring
Connecticut became the fifth state to pass a comprehensive privacy law.
Like other state laws, the CTDPA provides for threshold requirements regarding its application, and establishes new rights for consumers, such as the right of access, rectification, deletion, portability, and the right to opt out of targeted advertising, the sale of personal data, and profiling.
The CTDPA outlines various controller and processor responsibilities, such as:
- providing privacy notices to consumers;
- establishing and maintaining security practices; and
- undertaking and documenting data protection assessments.
The Act will enter into effect on 1 July 2023.
Read more here.
Brazil: ANPD calls for comments on regulation of international data transfers
The Brazilian data protection authority opened a call for comments on the regulation of international data transfers.
The ANPD stated that the regulations would be released in stages with the first stage focusing on the contractual instruments for international data transfers, namely Standard Contractual Clauses ('SCCs'), specific contractual clauses, and Binding Corporate Rules ('BCRs').
Read more here.
California: CPPA releases draft proposed CCPA regulations and announces meeting
The California Privacy Protection Agency released its draft proposed regulations under the CCPA.
The proposed regulations suggest additions and the removal of certain definitions, additions regarding restrictions on the collection and use of personal information, additions regarding disclosure requirements and methods for submitting CCPA requests and obtaining consent, as well as certain removals and amendments to privacy policy provisions, among other changes.
Read more here.