Sign in Subscribe

Topic

Transparency

A collection of 20 issues

California v. Delta Air Lines: Why a Website Privacy Policy May Not Cover a Mobile App

California’s lawsuit against Delta Airlines shows why mobile apps need privacy policies that clearly address their data practices—and how federal preemption can limit state enforcement even when an app allegedly fails to comply with CalOPPA.

When “Aggregated” Isn’t Anonymous: The New York Attorney General Pushes the Boundaries of App Data Disclosures

The New York Attorney General’s Matis case shows that “aggregated” data is not necessarily anonymous. If a third party can de-aggregate and re-identify individuals, the sharing should be disclosed—and contracts should expressly prohibit re-identification.

From Privacy by Design to Data Protection by Design: Principles and Practical Implementation

Privacy by Design embeds privacy into products, services, and business practices from the start. Explore its seven foundational principles, how they shaped Data Protection by Design under the GDPR, and practical steps organizations can take to turn privacy principles into everyday practice.

What is the "Right to an Explanation" under the GDPR?

The GDPR gives individuals important rights when organizations rely on automated decision-making and profiling. Learn when Article 22 applies, the safeguards organizations must implement, and how individuals can challenge automated decisions.

What does “lawfulness, fairness and transparency” mean under the GDPR?

What do the GDPR's requirements of lawfulness, fairness, and transparency actually mean? This article explains the legal basis for processing, the obligation to treat individuals fairly, and the duty to be open and honest about how personal data is collected, used, and disclosed.

Case Study: The WhatsApp Acquisition & Facebook Privacy Promises.

What happens to privacy promises after a merger? Using Facebook's acquisition of WhatsApp as a case study, this article examines FTC enforcement, consent requirements, and why companies must honor existing privacy commitments when integrating user data.