The COVID-19 pandemic has had a disparate effect on privacy regulators, with varying levels of enforcement advocated by different government entities; the California Attorney General, the U.S. Department of Health & Human Services (HHS), European data protection authorities, and other regulators have taken different, often contradictory, approaches to dealing with the competing interests of a struggling economy and the threat of increased privacy and cybersecurity violations. These contradictions are likely to persist, as competing privacy legislation was recently introduced in Congress to regulate the collection and use of personal information during the COVID-19 pandemic.
On the one hand, businesses struggling with the viruss economic impact are striving to allocate resources for maximum financial benefit, while on the other hand, risks to personal information and privacy rights have increased in a remote global workforce where phishing, malware, and other cyberattacks proliferate and the political pressure to collect and track medical information regarding COVID-19 infections mounts. With the seemingly competing interests of protecting the bottom line and a heightened threat to privacy, some privacy regulators are responding to these new realities by relaxing enforcement efforts, while others decline to do so in recognition of the heightened threats to privacy and information security.
Below is an update on how different regulators have responded regarding enforcement since the COVID-19 national emergency was declared.
The California Attorney General Remains Steadfast on the California Consumer Privacy Act
The California Attorney General has declared that despite the pandemic on top of already intense business pressure, it will not delay enforcement of the California Consumer Privacy Act (CCPA), which is set to begin on July 1st.
In late March, as the extent of the COVID-19 pandemic was becoming clear, a joint industry letter by advertising and adtech trade associations asked the Attorney Generals office to delay enforcement of CCPA until 2021. The letter highlighted that [t]he public health crisis brought on by COVID-19 juxtaposed with the quickly approaching enforcement date for the CCPA places business leaders in a difficult position. They are forced to consider trade-offs between decisions that are best for their employees and the world at-large and decisions that may help the organizations they lead avoid costly and resource intensive enforcement actions.
In an email to Forbes magazine, an advisor to the Attorney General responded, Right now, were committed to enforcing the law upon finalizing the rules or July 1, whichever comes first Were all mindful of the new reality created by COVID-19 and the heightened value of protecting consumers privacy online that comes with it. We encourage businesses to be particularly mindful of data security in this time of emergency.
Meanwhile, as of the date of this client alert, the Attorney Generals proposed regulations have yet to be finalized, having completed a third round of revisions and public commentary on March 27, 2020.
With only 30 days until the enforcement date, businesses subject to the CCPA should ensure that their CCPA compliance efforts remain on track.As a further incentive to ensure your compliance framework is in place, the California Privacy Rights Act (CPRA), commonly referred to as CCPA 2.0, has garnered enough signatures to appear on the November 2020 ballot. Among other measures, the CPRA would create a new enforcement agency, the California Privacy Protection Agency, expand data breach liability, and impose additional obligations on service providers, third parties, and contractors. In a nod to the business community, the CPRA would extent the current moratoriums on certain employee and business-to-business data from 2021 to 2023.
European Regulators Signal Flexibility
The European Data Protection Board (EDPB), an agency created under the General Data Protection Regulation, issued a statement on the processing of personal data in the context of COVID-19. The EDPB stated that even during this pandemic, data controllers and processors must ensure the lawful processing of personal data, but it also noted that an emergency might legitimize the restriction of freedoms provided these restrictions are proportionate and limited to the emergency period.
The EDPB provided clarification on how public health authorities and employers can process personal data in the context of a pandemic, pointing to legal bases such as processing pursuant to a legal mandate of a public authority and compliance with health and safety obligations that are in the public interest.
The EDPB also issued two new guidelines: (1) Guidelines 03/2020 on the processing of data concerning health for the purpose of scientific research in the context of the COVID-19 outbreak and (2) Guidelines 04/2020 on the use of location data and contact tracing tools in the context of the COVID-19 outbreak. Guidelines 03/2020 allow health data to be processed for the purpose of scientific research with the consent of the data subject, as long as there is not a significant power imbalance, or without consent for the purpose of complying with national legislation. Guidelines 04/2020 discuss the use and collection of location data to map the spread of the virus and contact tracing for notification purposes. The guidelines provide that contact tracing applications should be voluntary, rely on proximity information regarding users rather than tracing individual movements, and grant preference to processing anonymized data where possible. The EDPB emphasized in its guidance that response to the crisis and protection of the right to privacy are not mutually exclusive.
Data protection authorities in nearly all EU member states and the United Kingdom have issued similar guidance on the processing and sharing of personal data related to COVID-19. Organizations should continue to monitor guidance issued by the EDPB, the United Kingdom, and national data protection authorities in the countries in which organizations have a presence.
Department of Health & Human Services Relaxes Enforcement of the Health Insurance Portability and Accountability Act
Perhaps the most critical response to the COVID-19 pandemic has been from the Office of Civil Rights in HHS, which is charged with the enforcement of the Health Insurance Portability and Accountability Act (HIPAA). Compounding the conflict between the conservation of resources to protect the bottom line and heightened privacy concerns in the crisis is a third element in play under HIPAA: the critical role of protecting the privacy and security of personal medical and health information as the crisis escalated.
While covered health care entities must continue to comply with the privacy and security rules under HIPAA, HHS has issued guidance and relied on its discretion to relax enforcement and waive penalties for community-based testing sites, public health and health oversight activities conducted by business associates, disclosures made to law enforcement and first responders, and telehealth service providers. With the proliferation of telehealth services during the pandemic, it remains to be seen whether HHS will extend its policy of relaxed enforcement after the emergency has subsided.
Federal Trade Commission Warns of Increasing Threat
On May 19, the Federal Trade Commission (FTC) issued a public warning regarding scammers posing as contact tracers hired by state governments to obtain personal information such as Social Security numbers from unsuspecting individuals. A few days later, in coordination with the Federal Communications Commission, the FTC instructed service providers that enable robocalling to terminate services to any customers exploiting the pandemic to obtain sensitive information from individuals, threatening such providers with serious consequences for failure to comply. These recent statements by the FTC follow months of warnings of surging complaints since the beginning of the year (upward of 18,000 as of mid-April) related to the coronavirus and signals of increased enforcement activity by the agency.
Congress Proposes Competing COVID-19 Privacy Legislation
Reflecting the larger clash of interests, conflicting privacy legislation is currently pending in both houses of Congress. The COVID-19 Consumer Data Protection Act, introduced by Republican senators in May, seeks to regulate the collection and processing of personal health information, geolocation data, identifiers, and other data during the health emergency. Shortly thereafter, Democratic members of the House proposed the Public Health Emergency Privacy Act, which would broadly regulate data linked or reasonably linkable to an individual or device, including data inferred or derived about an individual or device. Most notably, the House bill includes a private right of action (a right not included in the Senate bill). Despite their differences, the speed at which these bills were introduced underscores the urgent need to build public trust in contact tracing technologies while holding government and businesses accountable for how collected personal information is used. Congress has not yet succeeded in passing national privacy legislation. Nonetheless, given the current exigent circumstances, if either of these bills is passed, it could form the basis for a future, more expansive general privacy legislation at the federal level.
Here is the original post:
- QazInnovations: Kazakhstan seeks to bring volume of innovative ... - inform.kz/en - April 23rd, 2023 [April 23rd, 2023]
- World Earth Day: What is green finance, and why do we need it so much? - The Economic Times - April 23rd, 2023 [April 23rd, 2023]
- Netarts Bay cleanup scheduled for Earth Day with SOLVE and ... - Tillamook Headlight-Herald - April 23rd, 2023 [April 23rd, 2023]
- Shaping humanitarian and ethical governance in Pakistan - The Express Tribune - April 23rd, 2023 [April 23rd, 2023]
- Remarks by Secretary of the Treasury Janet L. Yellen on the U.S. ... - Treasury - April 23rd, 2023 [April 23rd, 2023]
- Investing in nature: Building local economies through conservation - McKinsey - April 23rd, 2023 [April 23rd, 2023]
- Lalith's economic vision for Lanka: Export or perish - The Sunday Times Sri Lanka - April 23rd, 2023 [April 23rd, 2023]
- Alliance for an Energy Efficient Economy to help A.P. govt. implement energy-efficiency projects - The Hindu - April 23rd, 2023 [April 23rd, 2023]
- President Biden Announces Key Appointments to Boards and ... - The White House - April 23rd, 2023 [April 23rd, 2023]
- A Restraint Approach to U.S.China Relations: Reversing the Slide ... - Quincy Institute for Responsible Statecraft - April 23rd, 2023 [April 23rd, 2023]
- Carrollton Mayor and City Council Election Preview 2023: Meet your ... - Star Local Media - April 23rd, 2023 [April 23rd, 2023]
- Governor Kelly Signs Bipartisan Bill to Expand Teacher Workforce in ... - Kansas Governor - April 23rd, 2023 [April 23rd, 2023]
- Indigenous Peoples Must Have Full Representation, Participation in ... - United Nations - April 23rd, 2023 [April 23rd, 2023]
- The EPA Region 6 Announces a Total of $23 Million to ... - U.S. EPA.gov - April 23rd, 2023 [April 23rd, 2023]
- Kansas governor strikes funding for anti-abortion pregnancy centers ... - Kansas Reflector - April 23rd, 2023 [April 23rd, 2023]
- Can You Fight for Climate Justice Without Being Antiwar? - Common Dreams - April 23rd, 2023 [April 23rd, 2023]
- Sustainable Tourism: A World leading to the road of Environment consciousness - Nomad Lawyer - NomadLawyer - April 23rd, 2023 [April 23rd, 2023]
- Atlanta's Cop City and the Struggle for Climate Justice - Resilience - April 23rd, 2023 [April 23rd, 2023]
- Jaishankars visit to Uganda, Mozambique went almost unnoticed but it indicated Indias bold gambit in Africa - Firstpost - April 23rd, 2023 [April 23rd, 2023]
- Natural resource - Wikipedia - October 30th, 2022 [October 30th, 2022]
- Non-renewable resource - Wikipedia - October 30th, 2022 [October 30th, 2022]
- Minister Wilkinson Launches Phase 2 of the Regional Energy and Resource Tables - Canada NewsWire - October 13th, 2022 [October 13th, 2022]
- Executive Secretary participates in Russian Energy Week to advocate for decarbonization in the UNECE region ahead of COP27 - UNECE - October 13th, 2022 [October 13th, 2022]
- Renault Group: The Future Is NEUTRAL: The circular economy is stepping into a new era! - Yahoo Finance - October 13th, 2022 [October 13th, 2022]
- Economy Expected to Contract Further in 2023, as the Fed Appears Resolved to Tame Inflation - PR Newswire - October 13th, 2022 [October 13th, 2022]
- Brazils Runoff Election Will Have Enormous Effects on the Global Climate Crisis - Truthout - October 13th, 2022 [October 13th, 2022]
- Health disparities and health inequalities: applying All Our Health - GOV.UK - October 13th, 2022 [October 13th, 2022]
- Opinion: Biopolitics is the invisible hand shaping mental health - The Connecticut Mirror - October 13th, 2022 [October 13th, 2022]
- Avaaz urges Georgieva and Trudeau to lasso-in commitments from IMF to attend December's vital UN Biodiversity Talks in Montreal - GlobeNewswire - October 13th, 2022 [October 13th, 2022]
- Kochi as a global city? Why not, asks the man behind Ahmedabads mega city story | Manorama English - Onmanorama - October 13th, 2022 [October 13th, 2022]
- Hennessy and Thurgood Marshall College Fund Announce partnership with Group Black and The Bishop Gallery to make "America's Most Influential... - October 13th, 2022 [October 13th, 2022]
- Pollution Prevention Week highlights ways to reduce, reuse and recycle waste - Michigan (.gov) - September 22nd, 2022 [September 22nd, 2022]
- England headed for incineration overcapacity, warns UKWIN - Resource Magazine - September 22nd, 2022 [September 22nd, 2022]
- 3 years of the Principles for Responsible Banking: our vision for change United Nations Environment Finance Initiative - UNEP Finance Initiative - September 22nd, 2022 [September 22nd, 2022]
- Isn't It Time To Challenge The Growth Paradigm? OpEd - Eurasia Review - September 22nd, 2022 [September 22nd, 2022]
- Coalition of Nearly 50 Organizations Launches 'Tear the Paper Ceiling' Campaign to Raise Awareness Around the 70+ Million Workers in the U.S. Skilled... - September 22nd, 2022 [September 22nd, 2022]
- Remote work can actually be more productive: More Hub readers respond to the work-from-home phenomenon - The Hub - September 22nd, 2022 [September 22nd, 2022]
- Mendocino Public Health on record-setting Sept. heat: We can't just treat this as a once-in-15-years occurrence - The Mendocino Voice - September 22nd, 2022 [September 22nd, 2022]
- Carbon Ridge Secures $6 Million Investment from Leading Climate Investors and Maritime Industry Leaders - Business Wire - September 22nd, 2022 [September 22nd, 2022]
- Regenerative Travel Is the Next Phase of Responsible Tourism - Outside Online - Outside - September 22nd, 2022 [September 22nd, 2022]
- NNPC: Between rebranding and reforms, By Tijah Bolton-Akpan - Premium Times - September 22nd, 2022 [September 22nd, 2022]
- Embodying the spirit of Malaysia - The Edge Markets MY - September 22nd, 2022 [September 22nd, 2022]
- Nonprofit executive takes on state-appointed economic development role - MiBiz: West Michigan Business News - August 29th, 2022 [August 29th, 2022]
- Noble Mineral Exploration Signs Exploration Agreement with the Constance Lake First Nation - Junior Mining Network - August 29th, 2022 [August 29th, 2022]
- China and the Democratic Republic of the Congo: A Progressively Deepening Bilateral Partnership - The Geopolitics - August 29th, 2022 [August 29th, 2022]
- Oil money is flooding into Guyana. Who will benefit? - Reuters - August 29th, 2022 [August 29th, 2022]
- Remote-work revolution exposes need for better data, tracking tools to evaluate workforce, pay and economy - The Spokesman Review - August 29th, 2022 [August 29th, 2022]
- We need rare earth elements for a greener future, but there's a catch - CBC.ca - August 29th, 2022 [August 29th, 2022]
- BRNHA the steward of the living traditions of WNC: Opinion - Citizen Times - August 29th, 2022 [August 29th, 2022]
- The Fiji Times Back in history: Future of forestry sector - Fiji Times - August 29th, 2022 [August 29th, 2022]
- Hochul announces grand opening of Capital Region BOCES Career and Technical Education Center - Troy Record - August 29th, 2022 [August 29th, 2022]
- Predicting the Future of Greenhouse Gas Emissions - Columbia University - August 15th, 2022 [August 15th, 2022]
- JD.com Ranks 46th on 2022 Fortune Global 500 - Yahoo Finance - August 15th, 2022 [August 15th, 2022]
- Minister Wilkinson Releases New Report Showing the Impacts of Climate Change and Necessity of Climate Adaptation in Ontario - Canada NewsWire - August 15th, 2022 [August 15th, 2022]
- Do Armenians have a future as an independent nation? Part 4 - Armenian Weekly - August 15th, 2022 [August 15th, 2022]
- Getting the diagnostics right 2 - BusinessWorld Online - August 15th, 2022 [August 15th, 2022]
- GrammaTech and T.E.N. Announce Call for Nominations for Product Security Executive of the Year Awards - Business Wire - August 15th, 2022 [August 15th, 2022]
- Energy Vault and Jupiter Power Announce Agreement for Battery Energy Storage Projects in Texas and California Totaling 220 MWh - Business Wire - August 15th, 2022 [August 15th, 2022]
- The North East LEP: Thinking bigger and planning together for the future - Bdaily - August 15th, 2022 [August 15th, 2022]
- It's not enough to buy American. You also need to sell American all around the world. - The Ripon Society - July 27th, 2022 [July 27th, 2022]
- Bid to designate 50k acres in UP as wilderness highlights tension over public lands - MLive.com - July 27th, 2022 [July 27th, 2022]
- A 'Living Wall' At Texas A&M Could Be The Key To Smarter Cities - Texas A&M University Today - July 27th, 2022 [July 27th, 2022]
- Architects and designers must embrace the circular economy - Project Scotland - July 27th, 2022 [July 27th, 2022]
- Strategic Minerals increases Tin and Tantalum production in June and Q2 2022 at its Penouta Mine - Yahoo Finance - July 27th, 2022 [July 27th, 2022]
- Issues of the Environment: Improving recycling rates and quality of recycling materials in Washtenaw County - WEMU - July 27th, 2022 [July 27th, 2022]
- Joe Oliver: The Liberal Cabinet Needs an Intervention - The Epoch Times - July 27th, 2022 [July 27th, 2022]
- SDG&E and Cajon Valley Union School District Flip the Switch on Region's First Vehicle-to-Grid Project Featuring Local Electric School Buses Capable... - July 27th, 2022 [July 27th, 2022]
- Reimagining business: The greatest debt of all time - Newsroom - July 13th, 2022 [July 13th, 2022]
- Moody's affirms A1 rating of Newfoundland and Labrador, changes outlook to stable - Moody's - July 13th, 2022 [July 13th, 2022]
- New Mexico's oil and gas revenues are breaking records and complicating budgets - New Mexico Political Report - July 13th, 2022 [July 13th, 2022]
- FACT SHEET: White House Announces over $40 Billion in American Rescue Plan Investments in Our Workforce With More Coming - The White House - July 13th, 2022 [July 13th, 2022]
- The Class of 2022 Is Ready to Workon Their Terms - SHRM - July 13th, 2022 [July 13th, 2022]
- Faraday Copper Announces Updated Mineral Resource Estimate for the Copper Creek Project in Arizona; Measured and Indicated Mineral Resources Exceed... - July 13th, 2022 [July 13th, 2022]
- Inside the Triangle's latest job opening data: What boards are showing and who's hiring - WRAL TechWire - July 13th, 2022 [July 13th, 2022]
- Reserve Bank keeps blinkers on inflation, raising OCR to 2.5% - Stuff - July 13th, 2022 [July 13th, 2022]
- Abe's drive to bring back Japan | The Interpreter - The Interpreter - July 13th, 2022 [July 13th, 2022]
- UCF Hospitality Researchers Expertise Is Tapped for Global Sustainable Tourism Report - UCF - June 30th, 2022 [June 30th, 2022]
- Feminist Economics and the Fight for Human Rights - OHCHR - June 30th, 2022 [June 30th, 2022]
- Biden Administration announces historic coastal and climate resilience funding - National Oceanic and Atmospheric Administration - June 30th, 2022 [June 30th, 2022]
- Why green ammonia will be the workhorse of EU's future hydrogen economy - EURACTIV - June 30th, 2022 [June 30th, 2022]