On December 12, 2018, Senator Schatz (D-HI), along with 15 other Senators, introduced the Data Care Act of 2018 “to establish duties for online service providers with respect to end user data that such providers collect and use.” The bill…
Yearly Archives: 2018
Senators Introduce Data Care Act to Establish Duties for Online Service Providers
Tagged with: cyber security, data security, FTC, GDPR, hearings, legislation, policies and procedures, privacy, regulations
Posted in FTC, Legislation, Privacy, Standards
Posted in FTC, Legislation, Privacy, Standards
Amazon Echo Data at Center of Another Legal Battle
Amazon, Inc. is on the receiving end of another court order demanding it release the data and recordings associated with one of its Echo smart devices. For the uninitiated, Echo smart devices support voice interaction, music playback, and other administrative…
Tagged with: discovery, iot, litigation, privacy, smart devices
Posted in Internet of Things, Litigation, Privacy
Posted in Internet of Things, Litigation, Privacy
Senate Subcommittee Evaluates Expansion of the FTC’s Data and Privacy Authority
On November 27, 2018, the U.S. Senate Subcommittee on Consumer Protection, Product Safety, Insurance, and Data Security held a hearing titled “Oversight of the Federal Trade Commission,” which included testimony from Chairman Joseph Simons and Commissioners Rohit Chopra, Noah Phillips,…
Tagged with: breach, cyber security, cybersecurity, FTC, legislation, privacy, regulations
Posted in FTC, Legislation, Privacy, Regulations
Posted in FTC, Legislation, Privacy, Regulations
California Passes Internet of Things Law
California continues to pave the way for privacy and cybersecurity legislation as Governor Brown recently signed the first Internet of Things (“IoT”) security law in the United States (SB-327). While connected devices offer users convenience and efficiency, California lawmakers recognized…
Tagged with: cybersecurity, data security, internet of things, iot, legislation, privacy, security practices
Posted in Data Security, Internet of Things
Posted in Data Security, Internet of Things
Recent Decision Sends Companies Rushing to Review Browsewrap Agreements
A California federal court recently held in Rushing v. Viacom, Inc. that an arbitration provision in Viacom’s End User License Agreement (“EULA”) was one click shy of enforceability, and denied the company’s motion to dismiss claims against it pending arbitration.…
Anthem Agrees to Record Data Breach Settlement
In the wake of the largest U.S. health care data breach in history, Anthem, Inc., has agreed to pay $16 million to the Office for Civil Rights, which is a record settlement for alleged HIPAA violations. According to the Department…
Tagged with: breach, corrective action plan, cybersecurity, data security, ePHI, hacking, OCR
Posted in Cyberattack, Data Breach, Data Security, HIPAA, OCR
Posted in Cyberattack, Data Breach, Data Security, HIPAA, OCR
Key Takeaways from the California Consumer Privacy Act of 2018
On June 28, 2018, a month after the European Union’s General Data Protection Regulation went into effect, California passed its own comprehensive piece of privacy legislation—the California Consumer Privacy Act of 2018 (“CCPA”). The bill was passed as part of…
Technical FACTA Violation Insufficient to Confer Standing
A federal court in Texas cut short a putative class action alleging violation of the truncation requirement under the Fair and Accurate Credit Transactions Act (FACTA), sending a clear message to plaintiffs that minor inconvenience flowing from a procedural violation…
Tagged with: class action, cybersecurity, facta, litigation, spokeo, standing
Posted in Litigation, Privacy
Posted in Litigation, Privacy
Updated SEC Guidance Highlights Importance of Solid Cybersecurity Policies and Procedures
The Securities and Exchange Commission (“SEC” or “Commission”) has given public companies a heads up on where the Commission is setting its sights in the ever-developing world of cybersecurity. Here’s what you need to know, and what you need to…
Tagged with: cyber security, cybersecurity, data security, policies and procedures, risk management, SEC, security practices
Posted in Data Security, Privacy, Regulations
Posted in Data Security, Privacy, Regulations
