2019•Unpublished venueRequires access
Privacy Laws
Jeff Kosseff
Open publisher page 0 citations
Abstract
Privacy law limits companies’ collection, use, sharing, and retention of personal information. Although data security laws provide the safeguards that companies must have in place to prevent hackers from accessing customer data, privacy law restricts companies’ ability to use customer data. This chapter provides an overview of the regulation of privacy under Section 5 of the Federal Trade Commission Act, as well as the most prominent federal and state privacy laws that restrict the private sector's cyber-related use and disclosure of personal information. The California Financial Information Privacy Act, also known as SB-1, requires companies to receive opt-in consent from consumers before sharing their data with most unaffiliated third parties. In addition to the California Financial Information Privacy Act, California has imposed requirements on companies via the California Online Privacy Protection Act, the California Shine the Light law, and the California "Eraser Button" law.