The Ninth Circuit Court of Appeals has written the latest chapter of the ongoing saga of Article III standing for violations of the Illinois Biometric Information Privacy Act (“BIPA”). BIPA requires, among other things, that before collecting a person’s biometric…
Blog Archives
Year To Date Changes To State Data Breach Notification Laws
With so much attention being paid to the impending California Consumer Privacy Act, it can be easy to forget that other states have privacy and data security laws too. And those laws change routinely, with potentially significant impacts on businesses. …
Senate Bill Seeks to Protect Health Information Gathered from Wearable Devices
I wear a fitness tracker. I rarely take it off. Throughout the course of the day, it collects a bevy of information about me: my heart rate, my exercise habits, the length and quality of my sleep. When aggregated and…
Congress Holds Hearings on Privacy and Data Protection
With all of the hubbub swirling around Capitol Hill last week with the Michael Cohen hearings, you can’t be blamed if you missed the fact that two important congressional hearings on privacy and data protection took place as well, one…
Tagged with: cyber security, data security, hearings, legislation, privacy, regulations
Posted in Data Security, Legislation, Privacy
Posted in Data Security, Legislation, Privacy
California Passes Internet of Things Law
California continues to pave the way for privacy and cybersecurity legislation as Governor Brown recently signed the first Internet of Things (“IoT”) security law in the United States (SB-327). While connected devices offer users convenience and efficiency, California lawmakers recognized…
Tagged with: cybersecurity, data security, internet of things, iot, legislation, privacy, security practices
Posted in Data Security, Internet of Things
Posted in Data Security, Internet of Things
Anthem Agrees to Record Data Breach Settlement
In the wake of the largest U.S. health care data breach in history, Anthem, Inc., has agreed to pay $16 million to the Office for Civil Rights, which is a record settlement for alleged HIPAA violations. According to the Department…
Tagged with: breach, corrective action plan, cybersecurity, data security, ePHI, hacking, OCR
Posted in Cyberattack, Data Breach, Data Security, HIPAA, OCR
Posted in Cyberattack, Data Breach, Data Security, HIPAA, OCR
Updated SEC Guidance Highlights Importance of Solid Cybersecurity Policies and Procedures
The Securities and Exchange Commission (“SEC” or “Commission”) has given public companies a heads up on where the Commission is setting its sights in the ever-developing world of cybersecurity. Here’s what you need to know, and what you need to…
Tagged with: cyber security, cybersecurity, data security, policies and procedures, risk management, SEC, security practices
Posted in Data Security, Privacy, Regulations
Posted in Data Security, Privacy, Regulations
EU’s New Privacy Law—What You Need to Know
The European Union (EU) Parliament’s new data privacy law, known as the General Data Protection Regulation (GDPR), is set to become enforceable in all EU member states on May 25, 2018, just six months from now. The GDPR replaces the…
Tagged with: cybersecurity, data security, GDPR, legislation, privacy, regulations, risk management, security practices
Posted in Data Security, Privacy, Regulations, Standards
Posted in Data Security, Privacy, Regulations, Standards
Cybersecurity Best Practices — How General Counsel Can Prepare For The Worst
Take note GCs: The question is not if you will have to respond to a cybersecurity incident—the question is when. That was the message from speakers and panelists at the Association of Corporate Counsel’s annual meeting this year. Indeed, the…
Tagged with: cyber security, cybersecurity, data breach, data security, policies and procedures, risk analysis, risk assessment, risk management
Posted in Data Breach, Data Security
Posted in Data Breach, Data Security
Financial Services Committee Rounds Out Equifax Hearings
The House Financial Services Committee this morning rounded out a full week of congressional hearings for former Equifax CEO Richard Smith. Chairman Jeb Hensarling (R-TX) reiterated his earlier calls for national standards for data security and breach notifications. Ranking Member…
Tagged with: breach, cyber security, cybersecurity, data breach, data security, legislation, privacy, regulations
Posted in Cyber crimes, Cyberattack, Data Breach, Data Security, Legislation, Privacy
Posted in Cyber crimes, Cyberattack, Data Breach, Data Security, Legislation, Privacy
