Focused on Privacy BLOG

Welcome to the Focused On Privacy Blog! From breaking developments, to nuanced issues I encounter, to resources available across the internet–this blog is designed to provide a resource for both the beginner privacy enthusiast and the seasoned expert alike.

Attorney General Proposes to Roll Back Entity Level Exemptions under Connecticut Data Privacy Act

In a report from February of this year, the Connecticut Attorney General identified several proposed legislative changes to the Connecticut Data Privacy Act that would strengthen or clarify protections afforded to residents of the State. Specifically, the report states: The CTDPA contains a myriad of exemptions carving out entities from its requirements. Several states have…
FTC Warns that Notice and Choice May Not Be Enough to Protect Privacy

During a recent lecture at Fordham Law School, Samuel Levine, the Director of the Federal Trade Commission Bureau of Consumer Protection warned that when it comes to privacy “notice and choice is a fantasy world.” Mr. Levine did not mince words, further calling notice and choice a regime that “became a way for companies to…
Small but Mighty: The Vermont Data Privacy Act and It’s Private Right of Action

According to the 2020 census, Vermont’s population of just under 650,000 residents makes it the second to last in population in the nation and the sixth smallest state by area. Yet, Vermont has introduced a privacy bill that rivals California in scope. This broad scope is also punctuated by two key provisions. First, Vermont’s applicability…
Privacy and Cybersecurity: Two Very Different Sides of the Same Coin

Cybersecurity and privacy are often used interchangeably within business organizations because they both refer to how businesses protect personal data. However, there are also several substantial distinctions between the concepts of privacy and cybersecurity. In this post, I explain the differences between privacy and cybersecurity and do a deeper dive into cybersecurity as a legal…
The Buzz of Artificial Intelligence

In preparing for a talk on artificial intelligence this week, I was reminded of a basic, but increasingly risky, area for businesses as the buzz of artificial intelligence reaches a fever pitch. Namely–are you marketing an automated tool, product, or service as artificial intelligence? And, if so, have you vetted whether that automated tool, product,…
Privacy Question of the day

True or False: The Children’s Online Privacy Protection Act applies to data collected on children (under 13) who reside outside of the United States (i.e. in the EU). Vote Here! (Spoiler!!) The answer and explanation are described below. The answer may be surprising! The FTC’s frequently asked questions about COPPA address this issue under section…