The International Association of Privacy Professionals (IAPP) will host the IAPP Global Privacy Summit in Washington DC. The event will take place live and in person on April 11-14, 2022, focusing on education, connection, and development for data and privacy protection. Registration is currently open.

Members of the Han Santos privacy team will attend the conference to keep apprised of best privacy practices and reconnect with members of the international privacy community. Contact us if you will attend, as we would be happy to connect with you in Washington.

An unexpectedly large $7 million fine was imposed against Grindr for failing to secure valid consent to share personal data for advertising purposes.

Consent regarding the use of personal data for advertising purposes and other uses such as those essential to the app’s operation were contained within the privacy policy and subject to a user choosing the options “proceed”, “cancel”, or “accept”. The Norwegian DPA found that this approach fell short of the GDPR requirements that consent be “freely given,” “specific,” “informed,” and “unambiguous.”

The United States and European Union negotiators have indicated they are in the home stretch in finalizing a transatlantic data transfer mechanism to replace the invalidated Privacy Shield.

Additionally, the European Commission published its proposal for a Data Act. The act introduces binding requirements for manufacturers of connected devices and related services to provide access to the data that users create. It also gives consumers more control over what can be done with their data.