Since the 1970’s, fair information practices (FIPs) or fair information privacy practices (FIPPs) have formed the framework around which organizations structure their policies on data collection, use, disclosure, and retention. The cornerstone of individual privacy rights under the FIPs is…
Blog Archives
Is it Time to Rethink Notice and Choice as a Fair Information Privacy Practice?
Tagged with: cybersecurity, data security, policies and procedures, privacy, security practices
Posted in Privacy, Standards
Posted in Privacy, Standards
Senators Introduce Data Care Act to Establish Duties for Online Service Providers
On December 12, 2018, Senator Schatz (D-HI), along with 15 other Senators, introduced the Data Care Act of 2018 “to establish duties for online service providers with respect to end user data that such providers collect and use.” The bill…
Tagged with: cyber security, data security, FTC, GDPR, hearings, legislation, policies and procedures, privacy, regulations
Posted in FTC, Legislation, Privacy, Standards
Posted in FTC, Legislation, Privacy, Standards
California Passes Internet of Things Law
California continues to pave the way for privacy and cybersecurity legislation as Governor Brown recently signed the first Internet of Things (“IoT”) security law in the United States (SB-327). While connected devices offer users convenience and efficiency, California lawmakers recognized…
Tagged with: cybersecurity, data security, internet of things, iot, legislation, privacy, security practices
Posted in Data Security, Internet of Things
Posted in Data Security, Internet of Things
Anthem Agrees to Record Data Breach Settlement
In the wake of the largest U.S. health care data breach in history, Anthem, Inc., has agreed to pay $16 million to the Office for Civil Rights, which is a record settlement for alleged HIPAA violations. According to the Department…
Tagged with: breach, corrective action plan, cybersecurity, data security, ePHI, hacking, OCR
Posted in Cyberattack, Data Breach, Data Security, HIPAA, OCR
Posted in Cyberattack, Data Breach, Data Security, HIPAA, OCR
Updated SEC Guidance Highlights Importance of Solid Cybersecurity Policies and Procedures
The Securities and Exchange Commission (“SEC” or “Commission”) has given public companies a heads up on where the Commission is setting its sights in the ever-developing world of cybersecurity. Here’s what you need to know, and what you need to…
Tagged with: cyber security, cybersecurity, data security, policies and procedures, risk management, SEC, security practices
Posted in Data Security, Privacy, Regulations
Posted in Data Security, Privacy, Regulations
EU’s New Privacy Law—What You Need to Know
The European Union (EU) Parliament’s new data privacy law, known as the General Data Protection Regulation (GDPR), is set to become enforceable in all EU member states on May 25, 2018, just six months from now. The GDPR replaces the…
Tagged with: cybersecurity, data security, GDPR, legislation, privacy, regulations, risk management, security practices
Posted in Data Security, Privacy, Regulations, Standards
Posted in Data Security, Privacy, Regulations, Standards
Cybersecurity Best Practices — How General Counsel Can Prepare For The Worst
Take note GCs: The question is not if you will have to respond to a cybersecurity incident—the question is when. That was the message from speakers and panelists at the Association of Corporate Counsel’s annual meeting this year. Indeed, the…
Tagged with: cyber security, cybersecurity, data breach, data security, policies and procedures, risk analysis, risk assessment, risk management
Posted in Data Breach, Data Security
Posted in Data Breach, Data Security
Financial Services Committee Rounds Out Equifax Hearings
The House Financial Services Committee this morning rounded out a full week of congressional hearings for former Equifax CEO Richard Smith. Chairman Jeb Hensarling (R-TX) reiterated his earlier calls for national standards for data security and breach notifications. Ranking Member…
Tagged with: breach, cyber security, cybersecurity, data breach, data security, legislation, privacy, regulations
Posted in Cyber crimes, Cyberattack, Data Breach, Data Security, Legislation, Privacy
Posted in Cyber crimes, Cyberattack, Data Breach, Data Security, Legislation, Privacy
Equifax Hearings – Round Three
Richard Smith, former Chairman and CEO of Equifax, faced his third congressional hearing in two days, appearing this afternoon before the Senate Judiciary Committee’s Privacy, Technology, and the Law Subcommittee to discuss the recently revealed Equifax data breach and efforts…
Tagged with: breach, cyber security, cybersecurity, data breach, data security, hearings, legislation, privacy
Posted in Cyber crimes, Cyberattack, Data Breach, Data Security, Legislation, Privacy
Posted in Cyber crimes, Cyberattack, Data Breach, Data Security, Legislation, Privacy
Equifax Hearings Continue on the Hill
Former Equifax chief Richard Smith returned to Capitol Hill for a second day of congressional hearings into his company’s data breach, this time appearing before the Senate Banking, Housing, and Urban Affairs Committee. Committee Chairman Mike Crapo (R-ID) characterized the…
Tagged with: cybersecurity, data breach, data security, hearings, legislation, privacy, security practices
Posted in Cyber crimes, Cyberattack, Data Breach, Data Security, Litigation, Privacy
Posted in Cyber crimes, Cyberattack, Data Breach, Data Security, Litigation, Privacy
