Steven Hunwicks📶’s Post

🇺🇸 The draft American Privacy Rights Act marks a pivotal moment in the evolution of data privacy in the United States. This proposed legislation extends beyond the boundaries of existing state laws to establish a comprehensive federal standard. The Act introduces clear definitions of sensitive data, mandates regular risk assessments, and enforces data protection impact assessments for high-risk processing. It emphasizes data minimization, transparency, and consumer control over personal information. Businesses will face new obligations, particularly large data holders, who must now implement robust data security practices and facilitate consumer rights such as access, correction, and deletion of data. The Act’s emphasis on accountability and enforcement underscores the need for a culture shift towards greater data stewardship. Find out more: https://ow.ly/9PGy50Rzeth #PrivacyRights #APRA (via IAPP - International Association of Privacy Professionals)

Really interesting insights from today's, The Australian Financial Review on privacy policies in Australia. The main point being made is that privacy policies need to be clear, transparent, and simple to read. Having read more than my fair share, I have to agree. Most policies I review miss key information or use language that would be confusing to the average reader. It's fine to have a simple policy, provided you have strong internal documented procedures to ensure you manage data appropriately. 🔴 ****And please take note of the "fair and reasonable test" section. This will rely on Transparency and Consent. This has been said a few times so we have to expect this will be a big part of the update in August. ******* 🔴 for those that do not subscribe - here are the key takeaways: - Australians could spend nearly 46 hours a month reading privacy policies, with an average of 6876 words per policy. - The ACCC is advocating for stronger privacy protections against data firms selling information to businesses. - Prime Minister Anthony Albanese aims to introduce new privacy legislation in August. - Concerns persist over consumer data usage, lack of control, and complex privacy policies. - Proposed changes to the Privacy Act include extending coverage to 2.3 million small businesses and new obligations for digital platforms. - Legislative considerations include a fair data test, remedies for breaches, and obligations for digital platforms. https://lnkd.in/gbPsGxFC

Introducing the American Privacy Rights Act of 2024 (APRA). This latest blog by Mandatly Inc. explores the intricacies of APRA, including its scope, key definitions, obligations of covered entities, enforcement mechanisms, and how it distinguishes itself from other privacy laws. #APRA #Privacy #US #CCPA #CPRA #PrivacyCompliance #PrivacyRights #PrivacyRegulations #APRA2024 #DataProtection

I've been delivering training and education sessions recently for clients on the upcoming privacy amendments and what that's going to mean for businesses, their customers and marketing practices. If you need to take a good look at your data privacy and management practices in this space, then Richard Harris is your guy. The article is from AFR (=paywall), and his summary below is enough to demonstrate just what it's going to take for Australia to get this right. #dataprivacy

California’s privacy protection agency, the CPPA, recently released its first enforcement advisory – and it related to data minimisation. The advisory noted a trend whereby organisations requested additional personal information before allowing customers to access their rights under California law (like the right to deletion). The CPPA warned businesses against this practice. Here are some best practices we can take from this: 👉 Don’t ask people to create an account to manage their privacy or email subscription settings. 👉 People are reporting organisations for invasive personal information practices. (We’re seeing this in Australia too.) Reducing your personal information collection can reduce your risk of being reported, and it certainly reduces your risk of putting your customers offside. 👉 It’s important to carefully weigh the risk of collection before requesting information above the minimum required. Often, it’s not worth it. Reach out for an obligation-free discussion about your organisation’s data collection practices

On July 1, 2024, Oregon’s Consumer Privacy Act (OCPA) went into effect, marking a pivotal shift in data privacy. Here’s what you need to know:    The OCPA covers entities processing data of 100,000+ Oregon residents, or 25,000+ residents if the entity derives over 25% of its revenue from selling personal data. It grants rights to access, correct, delete, and opt out of data sales. One key requirement is the mandate for data protection assessments. These assessments ensure that businesses evaluate their data processing activities to identify and mitigate risks to consumer privacy. This includes assessing the potential impact of data collection, storage, and sharing practices.      Why It Matters:    Even if you don’t live in Oregon, these laws set a precedent for stronger privacy protections nationwide. Businesses operating across state lines must comply, potentially benefiting all consumers. This trend could also influence the push for a federal privacy law, ensuring comprehensive data protection for all Americans.    #PrivacyMatters #DataPrivacy #PrivacyLaws #TechPolicy #ConsumerRights    

I recently came across an insightful article shedding light on the upcoming Privacy Act Reform and how organisations can proactively prepare. The article underscores the importance of robust data retention policies and secure data erasure procedures, illustrated by the author's personal experience in Macau. This serves as a reminder of the imperative need for active data life cycle management. Moreover, implementing such policies not only ensures compliance but also reduce the attack surface by irreversibly eliminating sensitive data. As the saying goes, you can't lose data that no longer exists. Read the article here: https://lnkd.in/gQjdj2y9

🔒𝗜𝗻𝘁𝗿𝗼𝗱𝘂𝗰𝗶𝗻𝗴 𝘁𝗵𝗲 𝗔𝗺𝗲𝗿𝗶𝗰𝗮𝗻 𝗣𝗿𝗶𝘃𝗮𝗰𝘆 𝗥𝗶𝗴𝗵𝘁𝘀 𝗔𝗰𝘁 𝗼𝗳 𝟮𝟬𝟮𝟰 (𝗔𝗣𝗥𝗔)🔒   In today’s digital landscape, safeguarding privacy is paramount. Enter the American Privacy Rights Act of 2024 (APRA), a groundbreaking proposal unveiled as a discussion draft on April 7th by the esteemed chairs of the House Energy and Commerce Committee, Cathy McMorris Rodgers (R-Wash.), and the Senate Commerce Committee, Maria Cantwell (D-Wash.).   APRA stands as a beacon of hope, offering individuals enhanced control over their personal information. This legislation doesn't just stop at empowerment; it sets forth stringent guidelines for data handling practices. Transparency, accountability, and robust security measures are at its core, ensuring that businesses prioritize privacy in every facet of their operations.   Curious to delve deeper? Our latest blog post explores the intricacies of APRA, including its scope, key definitions, obligations of covered entities, enforcement mechanisms, and how it distinguishes itself from other privacy laws.   Stay informed. Stay empowered. Read more about APRA today!   https://lnkd.in/d2pzPqrZ   #APRA #PrivacyRights #DataProtection #DigitalPrivacy #Security #Legislation #Compliance #PrivacyLaw #Empowerment #Transparency #Accountability #USA #CPRA #CCPA #AmericanPrivacyRightsAct

🚨 Privacy Act changes are here! 🚨 The first tranche of the Australian Privacy Act reforms has officially entered Parliament, bringing significant changes to how organisations manage personal data. 💪 Stronger Enforcement: A new statutory tort for serious privacy breaches means individuals can now sue for significant invasions of privacy. 🤖 Automated Decision-Making: Organisations must disclose how personal data is used in automated decisions affecting individuals’ rights. 🧒 Children’s Online Privacy Code: A new compliance framework for handling children’s data is coming. 🔐 Data Breach Provisions: Enhanced powers to manage data sharing in emergencies and during major breaches. While advertising-specific provisions have been deferred, it’s critical for marketers to understand the broader impacts and start preparing now. You can start preparing now by downloading our free guide on data privacy for marketers. If you're a travel marketer, we have a specific guide for you. Links in comments.

🚨 2024 Privacy Act Changes: What Every Australian Business Needs to Know Major changes to Australia’s Privacy Act are coming in 2024, and businesses of all sizes must prepare for compliance. From stricter data breach penalties and new regulations on automated decision-making to stronger protections for minors, these reforms will reshape how companies handle personal data. Key changes include: ✅ Enhanced security and destruction of personal information ✅ Overhauled civil penalty regime ✅ New regulations for automated decision-making ✅ Children’s Online Privacy Code To find out more about these upcoming changes and what your Australian business should do to prepare, read the article here: https://lnkd.in/gft5zZEB If you need help ensuring your data is secure and compliant, contact us today at 1300 559 778. #PrivacyAct2024 #DataProtection #Compliance #DataPrivacy