With so much attention being paid to the impending California Consumer Privacy Act, it can be easy to forget that other states have privacy and data security laws too. And those laws change routinely, with potentially significant impacts on businesses. …
Blog Archives
5 Ways in Which Your Company’s Privacy Policy is Insufficient
Well thought-out internal privacy policies and procedures are an essential part of any company’s information management program. These internal policies should not be confused with a company’s external privacy notice, which informs the company’s customers as to how it may…
Tagged with: data security, policies and procedures, privacy, regulations, risk management, security practices
Posted in Policies and Procedures, Privacy
Posted in Policies and Procedures, Privacy
Congress Holds Hearings on Privacy and Data Protection
With all of the hubbub swirling around Capitol Hill last week with the Michael Cohen hearings, you can’t be blamed if you missed the fact that two important congressional hearings on privacy and data protection took place as well, one…
Tagged with: cyber security, data security, hearings, legislation, privacy, regulations
Posted in Data Security, Legislation, Privacy
Posted in Data Security, Legislation, Privacy
Is it Time to Rethink Notice and Choice as a Fair Information Privacy Practice?
Since the 1970’s, fair information practices (FIPs) or fair information privacy practices (FIPPs) have formed the framework around which organizations structure their policies on data collection, use, disclosure, and retention. The cornerstone of individual privacy rights under the FIPs is…
Tagged with: cybersecurity, data security, policies and procedures, privacy, security practices
Posted in Privacy, Standards
Posted in Privacy, Standards
Senators Introduce Data Care Act to Establish Duties for Online Service Providers
On December 12, 2018, Senator Schatz (D-HI), along with 15 other Senators, introduced the Data Care Act of 2018 “to establish duties for online service providers with respect to end user data that such providers collect and use.” The bill…
Tagged with: cyber security, data security, FTC, GDPR, hearings, legislation, policies and procedures, privacy, regulations
Posted in FTC, Legislation, Privacy, Standards
Posted in FTC, Legislation, Privacy, Standards
California Passes Internet of Things Law
California continues to pave the way for privacy and cybersecurity legislation as Governor Brown recently signed the first Internet of Things (“IoT”) security law in the United States (SB-327). While connected devices offer users convenience and efficiency, California lawmakers recognized…
Tagged with: cybersecurity, data security, internet of things, iot, legislation, privacy, security practices
Posted in Data Security, Internet of Things
Posted in Data Security, Internet of Things
Anthem Agrees to Record Data Breach Settlement
In the wake of the largest U.S. health care data breach in history, Anthem, Inc., has agreed to pay $16 million to the Office for Civil Rights, which is a record settlement for alleged HIPAA violations. According to the Department…
Tagged with: breach, corrective action plan, cybersecurity, data security, ePHI, hacking, OCR
Posted in Cyberattack, Data Breach, Data Security, HIPAA, OCR
Posted in Cyberattack, Data Breach, Data Security, HIPAA, OCR
Updated SEC Guidance Highlights Importance of Solid Cybersecurity Policies and Procedures
The Securities and Exchange Commission (“SEC” or “Commission”) has given public companies a heads up on where the Commission is setting its sights in the ever-developing world of cybersecurity. Here’s what you need to know, and what you need to…
Tagged with: cyber security, cybersecurity, data security, policies and procedures, risk management, SEC, security practices
Posted in Data Security, Privacy, Regulations
Posted in Data Security, Privacy, Regulations
EU’s New Privacy Law—What You Need to Know
The European Union (EU) Parliament’s new data privacy law, known as the General Data Protection Regulation (GDPR), is set to become enforceable in all EU member states on May 25, 2018, just six months from now. The GDPR replaces the…
Tagged with: cybersecurity, data security, GDPR, legislation, privacy, regulations, risk management, security practices
Posted in Data Security, Privacy, Regulations, Standards
Posted in Data Security, Privacy, Regulations, Standards
Cybersecurity Best Practices — How General Counsel Can Prepare For The Worst
Take note GCs: The question is not if you will have to respond to a cybersecurity incident—the question is when. That was the message from speakers and panelists at the Association of Corporate Counsel’s annual meeting this year. Indeed, the…
Tagged with: cyber security, cybersecurity, data breach, data security, policies and procedures, risk analysis, risk assessment, risk management
Posted in Data Breach, Data Security
Posted in Data Breach, Data Security
