Data Privacy Accountability in Practice: A Case Study of Cisco

How well do you know the EU-U.S. Data Privacy Framework (DPF)? In this episode, privacy leaders put common assumptions to the test, answering each question with “myth or reality?” before explaining what organizations need to know about the DPF and international data transfers. Is the DPF a substitute for GDPR? Does certification eliminate the need for Standard Contractual Clauses? Is the framework only useful for large companies? Myth or reality? The discussion separates fact from misconception while exploring DPF self-certification through the Department of Commerce, annual recertification, independent recourse mechanisms, privacy policy requirements, and the role of BBB National Programs. The episode also tackles myths surrounding controllers, processors and subprocessors, data subject rights, onward transfers, vendor contracts, and security safeguards. Finally, the experts examine independent verification and how a DPF Verified seal can help organizations demonstrate that their published privacy commitments align with their actual policies and procedures. Chapters: 00:00 – Welcome and DPF myth-versus-reality overview – Introduces the DPF and common questions about validity, certification, GDPR, and international data transfers. 01:16 – Is the DPF still valid after Trump v. Slaughter?- Explains why the episode says immediate obligations remain unchanged and reviews the framework’s Safe Harbor and Privacy Shield history. 04:52 – Is the DPF only for large multinational companies?- Shows how organizations of different sizes and sectors use the DPF, including small and medium-sized businesses. 07:53 – What the DPF is and how certification works – Defines the DPF and covers Department of Commerce self-certification, annual renewal, and independent recourse. 10:50 – BBB National Programs beyond dispute resolution – Covers privacy policy review, certification guidance, and recertification support beyond complaint handling. 11:38 – DPF vs. GDPR – Explains why the DPF covers international transfers but does not replace other GDPR obligations. 14:45 – DPF vs. Standard Contractual Clauses – Compares the DPF with SCCs and discusses scalability, efficiency, and clear certification requirements. 18:18 – DPF requirements for controllers and processors – Explores controller and processor responsibilities, notice, choice, and data subject rights. 22:33 – Onward transfers, vendors, and subprocessors – Reviews contracts, security safeguards, vendor due diligence, and subprocessor responsibilities. 27:06 – Independent verification and outside compliance review – Explains independent verification, outside compliance review, and the DPF Verified seal. 32:20 – Final takeaways and future-ready privacy programs – Closes with privacy accountability frameworks and preparing for a changing global privacy landscape. The post Data Privacy Framework Explained: Myth vs Reality appeared first on BBB National Programs.

The digital frontier is reshaping the way we resolve disputes. Join Juan Herrera, the head of the nation’s largest and longest-running vehicle warranty and lemon law dispute resolution program, BBB AUTO LINE, and Colin Rule, CEO of Mediate.com, as they explore how cutting-edge technologies are transforming online dispute resolution (ODR) across industries. Whether you’re a legal professional, a mediator, or simply curious about the future of conflict resolution, this podcast will equip you with insights on the tech journey ODR has been on, and where ODR is headed. Chapters: 00:00 – Intro & Guest Background: Juan Herrera welcomes Colin Rule, pioneer in online dispute resolution. 01:24 – What is ODR?: How technology transformed dispute resolution. 02:50 – Scaling Disputes at eBay: Building systems to handle millions of cases. 06:28 – Adapting for Complex Cases: Tailoring processes for high-value disputes. 09:56 – Pandemic Shift to Online Mediation: How COVID-19 changed the field. 14:24 – AI in Dispute Resolution: Current uses and future potential. 22:19 – Smart Contracts & Trust Tech: Blockchain’s role in resolving disputes. 26:16 – Ethics & Fairness in AI: Setting guardrails for trustworthy systems. 30:19 – Closing Thoughts: Colin’s vision for the future. The post The Impact of Emerging Tech on ODR appeared first on BBB National Programs.

The Connecticut Data Privacy Act (CTDPA) grants important data rights to Connecticut residents and solidifies critical privacy obligations for covered businesses. The Global Privacy Control or “Universal Opt Out Control” provision of the Act is intended to help consumers regain contol over their own data, and shifts that responsibility to businesses. BBB National Programs’ Vice President, Global Privacy Division and Privacy Initiatives Operations, BBB National Programs is joined by Jordan Levin, Assistant Attorney General, Privacy Section, Office of the Connecticut Attorney General, to discuss how the CTDPA changes the game when it comes to a consumer’s data privacy rights, how the process has been streamlined, but also how businesses are impacted by these changes. Resources: – Dona + Michele convo – Enforcement Report: Attorney General Tong Releases Updated Report on Connecticut Data Privacy Act – Connecticut Data Privacy Act FAQs – For consumers: How to Opt Out from Ad Tracking with Global Privacy Control? A Guide for Web Users – For businesses and web publishers The post The CTDPA’s Universal Opt Out Control: Data Rights & the Impact on Business appeared first on BBB National Programs.

It is not uncommon to hear that a child wants to be a content creator – making a living by sharing their hobbies, likes, and interests with a following on a social media platform like YouTube. A common business model for successful content creators is to work in paid partnership with a brand to market a product or service. How does that business model work when the influencer is a child? In this episode of In the Sandbox, our host Rukiya Bonner, Director of the Children’s Advertising Review Unit (CARU), speaks with Pocket.Watch’s Julia Moonves and Angela Tiffin (a former CARU attorney) about the business of child influencers. Together, they break down the state laws protecting these young content creators – such as the Coogan law and the new Illinois child influencer law – as well as the role of a parent in the business and the special considerations that come into play when working with a young creator.  Key Takeaways: Clear and conspicuous disclosures are essential in influencer videos to protect children and comply with advertising guidelines. When partnering with creators, it is important to consider their established audience, content quality, and aligned values. Influencer laws, such as the Coogan law, help protect child creators by requiring a percentage of their earnings to go into a trust account. AI-generated children may impact content creation, but human creators offer authenticity and a connection that AI lacks. Pocket.Watch prioritizes the well-being of child creators and works to minimize their involvement in commercial aspects of the work. Chapters: [00:00] Introduction and Overview [01:03] Concerns about Influencer Videos and Disclosures [02:52] Pocket.Watch: A Modern Kids Media Company [04:15] Angela Tiffin’s Role and Experience at K.R.U. [06:07] The Rise of Child Creators and Finding Partners [09:30] Protecting Child Creators and Vetting Families [12:49] Influencer Laws: Coogan Law and Related Legislation [15:37] Providing Disclaimers and Protecting Creators [17:34] The Impact of AI-Generated Children on Content Creation [19:01] Prioritizing the Well-being of Child Creators [20:24] Conclusion and Call to Action Mentioned in this episode: CARU Finds YouTube Channel “Vlad and Niki” in Violation of its Advertising Guidelines; Recommends Disclosure Modifications Subscribe to the Online Archive CARU’s Advertising Guidelines Compliance Warning: AI in Child-Directed Advertising and Data Collection   The post Protecting Child Influencers appeared first on BBB National Programs.

For the last 50 years, companies marketing to children have held each other to a higher standard. In 1974 the Children’s Advertising Review Unit (CARU) was established as the U.S. mechanism of independent self-regulation to protect children under age 13 from deceptive or inappropriate advertising. Over the years and as technology evolved, CARU expanded to address new media platforms, new advertising techniques, and to ensure that children’s data is collected and handled responsibly online. Join Rukiya Bonner, Director, CARU, BBB National Programs and her guest, former CARU attorney Katie Goldstein, now the Global Head of Policy and Regulatory Affairs at SuperAwesome, as they take a trip down memory lane and revisit memorable child-directed commercials, discuss how advertising has changed over the years, identify some of CARU’s most impactful self-regulatory guidelines, and explain CARU’s role in helping ensure that as technology has changed, children remain protected. In this episode, the host and guest discuss the history and impact of the Children’s Advertising Review Unit (CARU) in self-regulation and protecting children in the advertising space. Rukiya and Katie highlight the guidelines and cases that have shaped the industry over the past 50 years, including the importance of safety, diversity, and avoiding deceptive advertising practices. They also mention the role of pre-screening services, discuss the intersection of advertising and privacy, and conclude with a reminder that CARU’s guidelines still apply in the evolving landscape of AI and the metaverse. Key Takeaways: (4:22) The guidelines have evolved to address changing technology and advertising practices. Its evolving guidelines demonstrate adaptability to technological advancements and shifts in advertising methods, ensuring continued relevance and effectiveness. (6:14) Safety, diversity, and avoiding deceptive practices are key priorities in children’s advertising. Advertisers have special responsibilities toward children and should recognize the power of advertising to promote positive change. Safety, diversity, and the prevention of deceptive practices stand as foundational pillars in CARU’s approach to children’s advertising, prioritizing the well-being and informed consumption of young viewers. (10:19) Pre-screening services help ensure compliance with CARU guidelines. Through pre-screening services, CARU fortifies adherence to its guidelines, bolstering confidence in the ethical conduct of advertisers targeting children. (19:01) CARU’s guidelines still apply in the evolving landscape of AI and the metaverse. Even in the emergent realms of AI and the metaverse, CARU’s guidelines maintain their applicability, serving as essential guardrails in navigating the evolving landscape of digital advertising. By upholding these standards, CARU fosters a safer and more transparent advertising environment for children, regardless of technological advancements.   The post The Evolution of Advertising in the Children’s Space appeared first on BBB National Programs.

As the drumbeat to modernize the Children’s Online Privacy Protection Act (COPPA) continues, all components of the 1998 law have come under scrutiny, particularly the Safe Harbor provision. Under COPPA, the FTC has the ability to approve industry groups to administer self-regulatory programs implementing the protections for children outlined in the rule. Recently, some lawmakers have raised concerns that Safe Harbors are not an effective complement to the COPPA rule and might even be allowing for the rubberstamping of businesses that take advantage of Safe Harbors. To answer this question of whether or Safe Harbors are effective, Mamie Kresses, Vice President of the Children’s Advertising Review Unit (CARU), hosted a discussion with two people who have been very involved in COPPA compliance from different perspectives: Sheila Millar, Partner at Keller and Heckman, and Daniel Kaufman, Partner at Baker Hostetler and former Deputy Director of the FTC Bureau of Consumer Protection. Listen in to hear these experts’ thoughts on the value of the Safe Harbor provision, whether it should remain a part of the rule going forward, and ways the provision can be modernized and improved. For more information about this episode, read the show notes here.  Love what you’ve heard? Tell us how we can deliver you more great conversations. Share your insights and suggestions for future episodes.  The post COPPA Questions: Are Safe Harbors Effective? appeared first on BBB National Programs.

In this episode of The Accountability Studio, host Cobun Zweifel-Keegan is joined by two industry professionals for a deep-dive into one company’s innovative approach to data privacy, accountability, and trust. Listen in to hear Josh Harris, BBB National Programs’ Director of Global Privacy Initiatives, and Harvey Jang, Vice President and Chief Privacy Officer at Cisco discuss how Cisco developed its privacy program and how he and his team made privacy a business imperative for the company. For more information about this episode, read the show notes here.  Love what you’ve heard? Tell us how we can deliver you more great conversations. Share your insights and suggestions for future episodes.  The post Data Privacy Accountability in Practice: A Case Study of Cisco appeared first on BBB National Programs.

Despite this generation’s comfort navigating digital spaces today, they still face the same cognitive limitations – and therefore, vulnerabilities – that they always have. This reality is just one of the reasons that BBB National Programs’ Children’s Advertising Review Unit (CARU) recently issued revised guidelines to assure that advertising directed to children is not deceptive, unfair, or inappropriate for its intended audience. In this episode of the Accountability Studio, Mary Engle, Executive Vice President of Policy at BBB National Programs and Mamie Kresses, Vice President of CARU talk through the most significant revisions to the guidelines and explain what these changes mean for advertisers. Tune in to learn how advertisers can help shrink the gap between a child’s needs online and the safeguards in place to protect them. For more information about this episode, read the show notes here.  The post What Do CARU’s Revised Guidelines Mean for Advertisers? appeared first on BBB National Programs.

In this episode of The Accountability Studio, Moderator Cobun Zweifel-Keegan, Deputy Director of Privacy Initiatives at BBB National Programs, is joined by two industry professionals for an informative conversation on the cross-border privacy rules (CBPR) system, a voluntary framework with a global impact. BBB National Programs Director of Global Privacy Initiatives Josh Harris,  and Sam Schofield, International Trade Specialist, Global Data Privacy, share their knowledge on the purpose and vision of the multi-layered Asia-Pacific Economic Cooperation CBPR system. For more information about this episode, read the show notes here.  The post The Past and Future of Privacy Accountability: Is CBPR a Model? appeared first on BBB National Programs.

In the inaugural episode of The Accountability Studio, moderator Mary Engle, Executive Vice President, Policy poses a fundamental question to the leadership of BBB National Programs: Does independent, industry self-regulation really work? Program leaders responded with an empathic ‘yes,’ but also laid out the numerous factors that can contribute to the success or failure of a self-regulatory initiative. Tune in to hear them discuss the problems in the marketplace that led to the creation of each of their programs, how their programs work, and what they think the future of independent industry self-regulation will look like. Laura Brett, Vice President, National Advertising Division Maureen Enright, Vice President, Children’s Food and Beverage Advertising Initiative Dona Fraser, Senior Vice President, Privacy Initiatives Peter Marinello, Vice President, Direct Selling Self-Regulatory Council Moderator: Mary Engle, Executive Vice President, Policy For more information about this episode, read the show notes here.  The post With Great Power Comes Great Responsibility appeared first on BBB National Programs.