Tsaaro

  The California Privacy Rights Act (CPRA) is a new privacy law that was passed by California voters in November 2020. It is an amendment to the California Consumer Privacy Act (CCPA) and is set to go into effect on January 1, 2023. The CPRA expands and strengthens the privacy rights of California residents and imposes new obligations on businesses that collect and use personal information. The CPRA also creates a new agency, the  California Privacy Protection Agency  (CPPA), which will be responsible for enforcing privacy laws and regulations in California. The CPPA will have the authority to investigate violations of the CPRA, issue fines, and bring legal action against businesses that fail to comply with the law. Overall, the CPRA provides California residents with enhanced privacy rights and protections, while imposing new obligations and requirements on businesses that collect and use personal information. Businesses operating in California should start preparing for...

China’s Personal Information Protection Law  (PIPL) is a comprehensive data protection legislation that was passed by the Standing Committee of the National People’s Congress on August 20, 2021, and is set to take effect on November 1, 2021. The law seeks to protect the privacy rights of individuals and regulate the collection, use, storage, transmission, and processing of personal information by entities in China. Here are some of the key provisions of the PIPL: Definition of Personal Information:  The PIPL defines personal information broadly as any information that can be used to identify an individual, including name, date of birth, ID number, biometric data, and online identifiers. Consent Requirements:  Entities that collect personal information must obtain consent from the individual and clearly inform them of the purpose, method, and scope of the data collection. Cross-border Data Transfer:  The law imposes restrictions on cross-border transfer of personal da...

The United Arab Emirates (UAE) Personal Data Protection Law (PDPL) is a comprehensive law that aims to protect the privacy and personal data of individuals in the country. The law outlines rules and regulations that businesses and organizations in the UAE must follow to ensure that they collect, process, and store personal data in a secure and lawful manner. The PDPL aligns with several international data protection standards, including: General Data Protection Regulation (GDPR): The GDPR is the European Union’s data protection law, which has set a high standard for data protection worldwide. The PDPL shares many similarities with the GDPR, such as requiring explicit and informed consent for data processing and providing data subjects with rights to access, rectify, and erase their personal data. Asia-Pacific Economic Cooperation (APEC) Privacy Framework: The APEC Privacy Framework provides guidance to organizations on how to protect personal data in the Asia-Pacific region. The P...