Strict cross-border data transfer rules revealed for Quebec’s Bill 64 privacy law include hefty fines for business non-compliance and may serve as model across Canada. Changes begin in 2022 with most in effect by 2023. The bill also grants consumers private right-of-action, mandates breach notification, and requires companies to conduct privacy impact assessments.
In a case that could impact the business models of major tech companies, Google has been ordered to pay a €2.4 billion fine for using algorithms to favor its own comparison-shopping services over competitors in a breach of antitrust law. The case by the European Commission was ruled valid by the EU’s General Court but can still be appealed to the EU’s highest court.
The US Federal Trade Commission (FTC) has published changes to the Gramm-Leach Bliley Act, which protects consumer financial privacy at financial institutions and at companies handling financial activities. Key changes under the revised Safeguards Rule include: expanded definition of types of companies subject to GLBA more specific, detailed requirements for compliance oversight obligation to appoint a security officer to oversee and implement a security program
It’s all surveys today, Dear Reader. Marigold reports that consumers are eager for personalized content, with 79% saying they’re likely to engage with a personalized email tailored to their interests. Sadly, 33% feel their needs are unmet by current brand messages. Discounts and coupons (95%) top the list of what they want in exchange for personal data, followed closely by loyalty rewards at 94%. Content is last at 61%.