Resource Library

This checklist provides practical steps for your privacy, legal, and compliance teams to asses whether this Virginia Consumer Data Protection Act (VCDA) applies to your organization's data and provide tips for your organization to become compliant.

This Wisdom of the Crowd, compiled from questions and responses posted on the IT, Privacy and eCommerce eGroup, addresses the legal concerns that arise when taking photographs of employees and non-employees at company events, to be used for marketing and other promotional purposes by the organization in the United States.

In the wake of the US Supreme Court’s decision to overturn Roe v. Wade, the US Department of Health and Human Services (HHS) Office of Civil Rights (OCR) issued new guidance to address patient privacy under the Health Insurance Portability and Accountability Act (HIPAA) for those seeking reproductive health care services. This article discusses the guidance, which states that HIPAA allows providers to disclose certain protected health information (PHI), which includes information relating to one’s abortion or other reproductive care, without patient authorization only in specific circumstances that are “narrowly tailored to
protect the individual’s privacy and support their access to health services.”

Organization’s records retention schedules need to be synchronized with assurance current and emerging privacy laws . Records retention laws and regulations may require companies to retain records for a certain number of years, driven by literally thousands of record retention regulations. These requirements may override consumer deletion requests of their personal information.