On May 31, 2019, the US Department of State updated their Form DS-160 (online nonimmigrant visa application) and Form DS-260 (online immigrant visa application) to collect social media identifiers for those applying for nonimmigrant and immigrant visas. Applicants for US visas are now being asked to provide all social media identifiers they have used within the past five (5) years. This update was announced in a statement to the press by a US Department of State official on June 1, 2019.
A social media “handle” or “identifier” is any name used by the individual on social media platforms including, but not limited to, Facebook, Twitter, and Instagram. The updated visa application forms currently employ a drop-down menu which list the specific social media platforms for which identifiers are being requested. An example of the drop-down menu from online visa application form can be seen below: (more…)
When the law was signed by then Governor Brown (see our prior Alert here), the expectation was that Attorney General Becerra would issue the enabling regulations by July of this year, which would allow a phase-in period. Then by January 1, 2020, the requirements would be clear and companies would be able to properly formulate and implement their compliance policies. Regretfully, things are not going as expected.
First, in accordance with the law, General Becerra organized a series of public meetings: (more…)
On May 25, 2018, important European regulations regarding data privacy and protection go into effect that will have a major impact on American companies, many of whom don’t realize they will be subject to compliance with its requirements. The General Data Protection Regulations (the “GDPR”) will have severe penalties for non-compliance (as high as €20 million or 4% of annual worldwide turnover). The GDPR will also have very broad territorial reach applying not only to European entities, but also to entities located outside of Europe (including those in the U.S.) that process the personal data of living European individuals residing in the covered countries, including if the company:
Offers goods or services to individuals in the covered countries (e.g., e-commerce, capital raising, fund raising, immigration);
Employs individuals in one or more of the countries;
Monitors the behavior of individuals in any of these countries; and
Collects, stores, or processes the personal data of affected individuals on behalf of others.
For these purposes, the European definition of personal data mirrors nicely the American definition of personally identifiable information. Given the severe penalties and broad reach, it is important that each company in the U.S. consider whether the GDPR applies to its operations and, if so, how best to comply. (more…)
Well, the new deal has been struck between the EU and the U.S. What was called the EU-US Safe Harbor is being replaced by the newly created EU-US Privacy Shield. Now, all we need is to have the actual text released! (more…)