US companies are poorly prepared for even the most rudimentary privacy regulations, a new report says.
Governments around the world are issuing new regulations intended to protect individual privacy. And according to a new report, companies around the world aren't ready for those regulations.
The new report from the Internet Society's Online Trust Alliance (OTA) contains analysis of 29 variables in 1,200 privacy statements against common themes in three major privacy regulations: the European Union's General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
While the majority of the companies audited in the study aren't yet legally required to comply with the regulations, OTA found that firms aren't prepared for even the most basic future compliance. In the case of CCPA, which goes into effect in January 2020, organizations must explicitly state how users can access their data and potentially request it to be deleted. OTA found that virtually none of the organizations surveyed currently have this language in place.
In another example, only 3.5% include more than one language for their privacy statement. And while 70% had a date stamp on their privacy statement to show the effective date, there was no consistency in where the date was located; 46% had the date at the top of the page, 22% placed it at the bottom, and 2% had a date stamp in both locations.
For more, read here.
Check out The Edge, Dark Reading's new section for features, threat data, and in-depth perspectives. Today's top story: "How a PIA Can CYA."
About the Author(s)
You May Also Like
Securing Code in the Age of AI
April 24, 2024Beyond Spam Filters and Firewalls: Preventing Business Email Compromises in the Modern Enterprise
April 30, 2024Key Findings from the State of AppSec Report 2024
May 7, 2024Is AI Identifying Threats to Your Network?
May 14, 2024Where and Why Threat Intelligence Makes Sense for Your Enterprise Security Strategy
May 15, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024