Although the White House report remains a blueprint and does not
include enforceable regulations, the administration signaled that
it will immediately begin convening companies, privacy advocates
and other stakeholders to develop and implement codes of conduct
based on the Consumer Privacy Bill of Rights. If an organization
were to voluntarily adopt such codes of conduct, then, according to
the White House, that organization's public commitment to
adhere to such codes of conduct would "become enforceable
under Section 5 of the FTC Act."
The Obama administration also indicated that it will work with
Congress to craft legislation based on the Consumer Privacy Bill of
Rights, and empower the FTC and State Attorneys General to enforce
Specifically, the Consumer Privacy Bill of Rights provides that
consumers have the following rights:
to exercise control over what personal information is collected
by organizations, and how they use it
to have access to understandable and accessible details about
privacy and security practices
to expect companies to collect, use and disclose data in ways
that are consistent with the context in which consumers provided
to have data handled in a secure manner
to access and correct data
to have reasonable limits on the data that organizations
collect and retain
to have their data handled by companies with appropriate
measures in place to assure they adhere to the Consumer Privacy
Bill of Rights.
In addition, the California Department of Justice last week
announced a Joint Statement of Principles (the
"Principles") with the leading operators of mobile app
platforms to improve privacy protections for consumers. Under the
Principles, Amazon, Apple, Google, Hewlett-Packard, Microsoft and
RIM (the "Platforms") committed to taking steps to
increase awareness among mobile app developers about their privacy
obligations under California law, and to promoting transparency in
Specifically, the Principles call for the Platforms to (i)
include, in the app submission process, optional data fields for
developers to submit the text of, or links to, their privacy
policies, (ii) enable end user access to the privacy policies
submitted by developers, and (iii) give end users tools to report
non-compliant apps to the Platforms, and to implement processes to
respond to these reports.
In the release accompanying the Principles,
California's Justice Department noted that the Principles were
designed to ensure that mobile app developers comply with the
California Online Privacy Protection Act, which requires operators
of online services (including mobile apps) that collect personal
information about Californians to conspicuously post a privacy
This alert provides general coverage of its subject area. We
provide it with the understanding that Frankfurt Kurnit Klein &
Selz is not engaged herein in rendering legal advice, and shall not
be liable for any damages resulting from any error, inaccuracy, or
omission. Our attorneys practice law only in jurisdictions in which
they are properly authorized to do so. We do not seek to represent
clients in other jurisdictions.
To print this article, all you need is to be registered on Mondaq.com.
Click to Login as an existing user or Register so you can print this article.
In last year's BakerHostetler Incident Response Report, we reported the range of PCI DSS non-compliance fines as $5,000 – $50,000 and the per card amount of liability imposed to reimburse issuers of affected cards as $3-$25.
Mintz, Levin, Cohn, Ferris, Glovsky and Popeo, P.C.
The Payment Card Industry Security Standards Council (PCI SSC) has released a new version of its data security standard for the protection of cardholder data, the Payment Card Industry Data Security Standard (PCI DSS).
The idea of cybersecurity may be foreign—or even frightening—to many attorneys. However, as evidenced in Part One of this series ("Cybersecurity: You Can't Afford to Ignore It Anymore," April 25) law firms appear to be the next great target for hackers. In light of that, as a risk management prevention tool, attorneys and firms need to be aware of how to protect themselves.
This service is completely free. Access 250,000 archived articles from 100+ countries and get a personalised email twice a week covering developments (and yes, our lawyers like to think you’ve read our Disclaimer).