Privacy updates

China

Added paper and verbal formats according to the Personal Information Protection Law (PIPL) of 2021 and updated the Tool Tip language according to the PIPL.

Updated the URL to Personal Information Security Specification and added the URL to its unofficial English translation in the Resource Library and in the tool tip.

Updated the language in the Notify the Appropriate Regulatory Authorities or Ministries (China) task. Specifically, updated the required content of the breach notification and added the director mailbox of CAC.

Updated the language in the Notify Affected Individuals (China) task to add a notification exemption.

China Financial

Updated the URL to Personal Financial Information Protection Technical Specification in the Resource Library and in the Tool Tip.

Denmark

Updated the URL to download the Dealing with breaches of personal data security PDF in the Resource Library.

Updated the URLs to the Guidance and the online form in the Notify the Supervisory Authority (Denmark) task.

GDPR

Updated the URL to the EDPB's Guidance on Personal data breach notification under Regulation 2016/679 in the Notify the Supervisory Authority task and the Subsequent Notification to Supervisory Authority task for all EEA Regulators.

Jersey

Updated the URL to the Data Protection Authority Law in the Resource Library.

Updated the language in the Notify Affected Individuals (Jersey) task. Specifically, added permitted notification delay and two notification exemptions.

Kansas

Updated the language in the Notify KS Consumers Individually task to reflect delayed notification based on a criminal investigation.

Updated the language in the Notify Credit Bureaus (KS) task to indicate notification for over 1000 consumers is needed without unreasonable delay.

Peru

Updated the URL to Ley de Protección de Datos Personales - Ley No. 29733.