If you’re a CISO living in New York get ready for the phone calls!!! On September 13, 2016, Governor Andrew M. Cuomo proposed the nation’s first cybersecurity regulation. Starting on September 28, 2016 there is a limited 45 day window…
Blog Archives
“Full Employment for CISOs in New York”: New York Proposes the Nation’s First Cybersecurity Regulation
Tagged with: breach, cyber security, cybersecurity, data security, encryption, privacy, regulations, risk assessment, risk management, security practices
Posted in Data Security, Legislation, Regulations
Posted in Data Security, Legislation, Regulations
Feds Push for Better Cybersecurity
President Obama has long discussed the importance of improving governmental cybersecurity, but the issue gained significant traction last year after two massive breaches at the Office of Personnel Management (OPM). In February 2016, the President issued an Executive Order to…
Tagged with: cyber security, data security, privacy, security practices
Posted in Legislation, Privacy, Regulations
Posted in Legislation, Privacy, Regulations
Wyndham Settles with FTC
Last month, Wyndham Worldwide Corp. settled its lengthy civil case with the Federal Trade Commission. The suit began in 2012, when the FTC sued Wyndham and three of its subsidiaries, alleging three data breaches between 2008 and 2010 were a…
Life After Death (of Safe Harbor) – EU Data Protection in the Wake of Schrems
One month after the landmark decision in Schrems vs. Data Protection Commissioner (C-365/14), the European Commission (Commission) has issued guidelines, in the form of a Communication, regarding the transfer of personal data from the EU to the U.S. As we…
The End of Safe Harbor – What Does it Mean?
This past Tuesday, in the groundbreaking decision of Schrems vs. Data Protection Commissioner (C-362/14), the Court of Justice of the European Union (CJEU) invalidated the Safe Harbor provision of the EU Commission, 2000/560C/EC. The Safe Harbor program was the easiest…
U.S. Appeals Court Upholds the FTC’s Authority to Police Cybersecurity Practices
In a highly anticipated and precedential opinion issued earlier this week, the Third Circuit Court of Appeals upheld the FTC’s authority to regulate corporate cybersecurity. The decision in Federal Trade Commission v Wyndham Worldwide Corp et al., addressed whether the FTC has…
The FCC Asserts its Role as Regulator of Data Security
The FCC recently signaled its intention to move aggressively into the realm of data security regulation. On October 24, 2014, the agency released a Notice of Apparent Liability for Forfeiture (NAL), ordering two telecommunication companies to pay a combined $10…
New Executive Order Seeks to Improve Security of Consumer Financial Transactions
The Obama Administration is taking new steps aimed at improving the security of consumer financial transactions. Specifically recognizing that identity crimes, including credit card fraud, are a risk to U.S. economic activity, President Barack Obama issued an executive order on…
EU Set to Strengthen Data Protection Laws
Businesses that operate in the European Union (EU) may soon face a new set of data protection regulations. High-level discussions about a proposal to consolidate all individual EU-member nations’ data protection regulations into a single EU law are set to…
Google Settles With FTC Over In-App Purchases Dispute
The Federal Trade Commission (FTC) is increasingly focused on the technology sector and is using its monitoring and enforcement powers to crack down on alleged consumer protection violations by big tech firms. Google reached a major settlement with the FTC…
Posted in Privacy, Regulations
