While a uniform federal privacy law in the United States continues to be an uncertain prospect overshadowed by other national priorities such as infrastructure and COVID relief, state legislatures have pushed forward with their own privacy regimes, resulting in an…
Blog Archives
Introduction to the Virginia Consumer Data Protection Act – Part II
This is the second installment of our summary of the Virginia Consumer Data Protection Act (“VCDPA”). In our first post, we covered the goals of the law as well as its applicability and thresholds, what qualifies as personal data, the…
Tagged with: controllers, data protection assessments, legislation, personal data, privacy, privacy notice, processors, VCDPA
Posted in Data Security, Legislation, Privacy, Regulations, VCDPA
Posted in Data Security, Legislation, Privacy, Regulations, VCDPA
Getting Tough with Zero Trust – Biden Bolsters Cybersecurity via Executive Order
On May 12, 2021, President Biden issued Executive Order No. 14028, entitled “Improving the Nation’s Cybersecurity”, setting out new and enhanced cybersecurity standards for federal government agencies and the commercial software products utilized by them. The Biden administration’s order comes…
Tagged with: best practice, critical infrastructure, cybersecurity, encryption, executive order, mfa, NIST, ransomware, software, standards
Posted in Data Security, Regulations, Standards, Uncategorized
Posted in Data Security, Regulations, Standards, Uncategorized
Introduction to the Virginia Consumer Data Protection Act – Part I
Virginia recently joined California in enacting a comprehensive data protection law intended to protect the privacy of its residents. The Virginia Consumer Data Protection Act (the “VCDPA”) is scheduled to take effect on January 1, 2023, so impacted businesses have…
Tagged with: CCPA, consumer, controllers, GDPR, legislation, personal data, privacy, sensitive data, VCDPA
Posted in Data Security, Legislation, Privacy, Regulations, VCDPA
Posted in Data Security, Legislation, Privacy, Regulations, VCDPA
European Data Protection Board Releases Guidance on Cross-Border Data Flows in the Wake of Schrems II
On November 10, the European Data Protection Board (EDPB), the European Union’s top data privacy regulator, issued long-awaited guidance setting out a framework for navigating transfers of data out of the European Economic Area (EEA) in light of this July’s…
Tagged with: cross-border, data flow, data mapping, EDPD, GDPR, guidance, privacy shield, SCCs, Schrems, standard contractual clauses
Posted in GDPR, Regulations, Standards
Posted in GDPR, Regulations, Standards
Bipartisan Bill Would Regulate Automated COVID-19 Contact Tracing Technology
A new federal COVID-19 data privacy bill with bipartisan support, the Exposure Notification Privacy Act, would have a substantially narrower scope of application than two previous partisan draft COVID-19 privacy laws. The bipartisan bill specifically regulates “automated exposure notification services,”…
Tagged with: coronavirus, COVID-19, Federal Privacy Legislation, legislation, technology
Posted in Legislation, Privacy, Regulations
Posted in Legislation, Privacy, Regulations
Democrats and Republicans Introduce Competing COVID-19 Data Privacy Bills
Responding to widespread calls for uniform rules and restrictions regarding the collection and use of individuals’ COVID-19-related health information, Congressional Republicans and Democrats have each recently introduced their own versions of federal COVID-19 data privacy bills. Although both parties’ bills…
Tagged with: coronavirus, COVID-19, Federal Privacy Legislation, legislation, privacy
Posted in Legislation, Privacy, Regulations
Posted in Legislation, Privacy, Regulations
Does the CCPA Apply to Financial Institutions?
Despite the global pandemic, the California Attorney General will begin enforcing the California Consumer Privacy Act on July 1 as planned, so even in this new work-from-home environment, businesses must continue to work towards compliance and resolve any open issues.…
Tagged with: attorneys general, California Consumer Privacy Act of 2018, CCPA, enforcement, GLBA, privacy, regulations
Posted in CCPA, Legislation, Privacy, Regulations
Posted in CCPA, Legislation, Privacy, Regulations
What Is A “Reasonable Link” Under CCPA?
On February 7, 2020, California Attorney General Xavier Becerra published modified regulations for the California Consumer Privacy Act after reviewing the public comments received on the initial draft regulations. While the modified regulations provide some much-needed clarity, they also leave…
Privacy Primer: Gramm-Leach-Bliley Act (GLBA)
GLBA, sometimes called the Financial Services Modernization Act of 1999, is a U.S. banking law that has important privacy and data security requirements for institutions that are subject to the law. The law applies to “any institution the business of…
