When organizations implement workplace surveillance tools, the conversation often begins with privacy. Questions about employee consent, data collection, retention periods, and legal compliance are essential. But as workplace monitoring technologies become more sophisticated, focusing exclusively on privacy risks often overlooks a much larger challenge.
Data Privacy
Posted inData Privacy
India’s data privacy rules entering enforcement phases, raising compliance stakes for U.S. financial firms
India’s Digital Personal Data Protection Act soft enforcement period will end in November. With more active enforcement to follow, financial institutions that failed to comply could face penalties of up to $26.2 million.
Posted inBest Practices
Brazil’s National Data Protection Authority: How regulators investigate and enforce its data protection law
In June of this year, Brazil’s National Data Protection Authority opened an administrative enforcement proceeding against Claro, one of the country’s largest telecom carriers, over the sharing of customer data with Serasa, the largest credit bureau in Latin America.
Posted inData Privacy
GDPR 10 years on: Differences in regulatory enforcement still problematic
In the decade since the EU’s groundbreaking privacy legislation, the GDPR was approved, companies have faced increased scrutiny over the reasons they collect, retain, and share personal information, as well as the measures they take to ensure its security.
Posted inArtificial Intelligence
Companies risk violating data, consumer laws over agentic AI use
Companies are at increased risk of violating Europe’s tough privacy laws because boards have little awareness of the different types of AI or their inherent risks. While many organizations are more familiar with predictive and conversational AI tools, such as chatbots that carry little or no discernible risk, they have not grasped that generative AI—and especially agentic AI—are different animals.
Posted inData Privacy
Amazon fined $2.25M for failing to respond to identity theft victim requests
Amazon has agreed to pay $2.25 million for failing to provide records to customers who were victims of identity theft, as required by the Fair Credit Reporting Act (FCRA), the Federal Trade Commission (FTC) said. The fine, described in a proposed order, is the largest ever levied for an FCRA violation, the FTC said in a […]
Posted inData Privacy
GDPR 10 years on: Data compliance now front of mind
Europe’s landmark privacy legislation, GDPR, was officially adopted ten years ago and has been in force since May 2018. It has forced organizations to change the way they think about personal information and has put privacy risk firmly on the board’s agenda, especially since the sanctions available under the regime are potentially ruinous
Posted inArtificial Intelligence
Littler Survey: AI and data privacy issues top of mind for employers
AI ranked as the top issue that’s expected to impact workplace policy changes over the next 12 months, even more so than DEI)and immigration enforcement matters, according to findings from law firm Littler’s 14th Annual Employer Survey.
Posted inData Privacy
ICO lists five steps to help companies protect themselves from AI cyber threats
Companies have long prioritized cybersecurity as a key risk to their operations, but AI’s ability to increase the number, speed, severity, and types of attacks has prompted the U.K.’s regulator to set out five practical steps that organizations can take to strengthen their resilience against AI-powered threats and cyberattacks.
Posted inData Privacy
China’s data scrutiny puts financial firms’ day-to-day compliance to the test
China is tightening personal information protections and urging businesses that handle personal data to strengthen compliance. Violations could result in million-dollar fines, depending on the case.
