Whitney McCollum

May 14, 2024 | lexology.com | Pamela J. Garvie |Bruce Heiman |Scott J. Gelbman |Joseph B. Trahern |Abby Dinegar |Whitney McCollum | +1 more

On 7 April, US House Committee on Energy and Commerce (Energy and Commerce Committee) Chairwoman Cathy McMorris Rodgers (R-WA) and US Senate Committee on Commerce, Science, and Transportation (Commerce Committee) Chairwoman Maria Cantwell (D-WA) released a discussion draft entitled the American Privacy Rights Act of 2024 (APRA). If enacted, the APRA would establish the first national comprehensive consumer data privacy rights law in the United States and could have a sweeping impact.

Jan 29, 2024 | mondaq.com | Whitney McCollum

On 9 January, 2024, the Federal Trade Commission (FTC) issued its first settlement prohibiting a data broker from sharing or selling sensitive location data, and required deletion of all location data collected deceptively. The FTC alleged that X-Mode Social ("X-Mode"), and Outlogic, LLC ("Outlogic"), X-Mode's successor firm, failed to implement reasonable and appropriate safeguards on the use of such information by third parties.

Jan 19, 2024 | natlawreview.com | Ryan Bykerk |Philip Person |Whitney McCollum |Kathryn J. Russo

On 9 January, 2024, the Federal Trade Commission (FTC) issued its first settlement prohibiting a data broker from sharing or selling sensitive location data, and required deletion of all location data collected deceptively. The FTC alleged that X-Mode Social (“X-Mode”), and Outlogic, LLC (“Outlogic”), X-Mode’s successor firm, failed to implement reasonable and appropriate safeguards on the use of such information by third parties.

Jan 2, 2024 | natlawreview.com | Whitney McCollum

The Federal Trade Commission (FTC) issued a first-of-its-kind proposed order prohibiting Rite Aid Corporation from using facial recognition technology for surveillance purposes for five years. The FTC alleged that Rite Aid’s facial recognition technology generated thousands of false-positive matches that incorrectly indicated a consumer matched the identity of an individual who was suspected or accused of wrongdoing.

Jul 13, 2023 | jdsupra.com | Whitney McCollum |Thomas Nietsch

In a NutshellOn 10 July 2023—nearly three years to the day after the Schrems II decision of the Court of Justice for the European Union (CJEU) (Schrems II Decision, see our Alert here)—the EU Commission has adopted the adequacy decision for the new and entirely revamped EU-US Data Privacy Framework (DPF) as a means to secure transfers of personal data from the European Union to companies in the United States.