Privacy And Security Basics - Do's And Dont's

As more and more states implement privacy laws, businesses must stay up to date with them and continuously address their data privacy and security practices. Even if a business is not subject to any of the new state laws, the Federal Trade Commission has wide latitude in enforcing businesses and their privacy practices. If a business collects personal information, it must have a proper privacy policy that accurately reflects its business practices. Here is a short list of privacy and security related do's and dont's businesses should follow.

1. Do Update Privacy Policies. Even if your company previously was not subject to certain laws, such as the EU's General Data Protection Regulation, or California's California Consumer Privacy Act as modified by the California Privacy Rights Act (collectively, the "CCPA"), you should reevaluate your company's privacy policy at least annually. If any of your data practices have changed or any of the parameters that could bring