As the use of artificial intelligence (AI) rapidly expands throughout the private sector and government, the Biden administration has published a report titled A Blueprint for an AI Bill of Rights. A summary is available at https://www.whitehouse.gov/ostp/ai-bill-of-rights/ and the full…
Blog Archives
NIST Issues New Artificial Intelligence Risk Management Framework
The National Institute of Standards and Technology (NIST) recently released version 1.0 of its Artificial Intelligence Risk Management Framework. The framework is available at https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.100-1.pdf, and a full set of supporting documents is available at https://www.nist.gov/itl/ai-risk-management-framework. There is an emerging…
Federal Agencies Announce a New 36-Hour Cybersecurity Incident Rule Reporting Requirement
On November 18, 2021, the Office of the Comptroller of the Currency (“OCC”), the Board of Governors of the Federal Reserve System (“Board”), and the Federal Deposit Insurance Corporation (“FDIC”) (collectively, the “Agencies”) issued a new rule (the “Rule”) that…
Tagged with: banking, breach, cyber security, cybersecurity, data breach, data security, FDIC, federal reserve, notification, OCC, privacy
Posted in Data Breach, Policies and Procedures, Regulations, Standards
Posted in Data Breach, Policies and Procedures, Regulations, Standards
FTC’s Amended Safeguards Rule Imposes Significant Requirements on Covered Entities
On October 27, 2021, the Federal Trade Commission (“FTC”) announced new updates to the Gramm-Leach-Bliley Act (“GLBA”) by amending the Standards for Safeguarding Customer Information, known as the “Safeguards Rule,” and issuing a final rule (the “Final Rule”). The Safeguards…
Tagged with: data security, financial institutions, privacy, safeguards, Safeguards Rule, security practices
Posted in FTC, GLBA, Regulations
Posted in FTC, GLBA, Regulations
Introduction to the Virginia Consumer Data Protection Act – Part II
This is the second installment of our summary of the Virginia Consumer Data Protection Act (“VCDPA”). In our first post, we covered the goals of the law as well as its applicability and thresholds, what qualifies as personal data, the…
Tagged with: controllers, data protection assessments, legislation, personal data, privacy, privacy notice, processors, VCDPA
Posted in Data Security, Legislation, Privacy, Regulations, VCDPA
Posted in Data Security, Legislation, Privacy, Regulations, VCDPA
Introduction to the Virginia Consumer Data Protection Act – Part I
Virginia recently joined California in enacting a comprehensive data protection law intended to protect the privacy of its residents. The Virginia Consumer Data Protection Act (the “VCDPA”) is scheduled to take effect on January 1, 2023, so impacted businesses have…
Tagged with: CCPA, consumer, controllers, GDPR, legislation, personal data, privacy, sensitive data, VCDPA
Posted in Data Security, Legislation, Privacy, Regulations, VCDPA
Posted in Data Security, Legislation, Privacy, Regulations, VCDPA
Democrats and Republicans Introduce Competing COVID-19 Data Privacy Bills
Responding to widespread calls for uniform rules and restrictions regarding the collection and use of individuals’ COVID-19-related health information, Congressional Republicans and Democrats have each recently introduced their own versions of federal COVID-19 data privacy bills. Although both parties’ bills…
Tagged with: coronavirus, COVID-19, Federal Privacy Legislation, legislation, privacy
Posted in Legislation, Privacy, Regulations
Posted in Legislation, Privacy, Regulations
Does the CCPA Apply to Financial Institutions?
Despite the global pandemic, the California Attorney General will begin enforcing the California Consumer Privacy Act on July 1 as planned, so even in this new work-from-home environment, businesses must continue to work towards compliance and resolve any open issues.…
Tagged with: attorneys general, California Consumer Privacy Act of 2018, CCPA, enforcement, GLBA, privacy, regulations
Posted in CCPA, Legislation, Privacy, Regulations
Posted in CCPA, Legislation, Privacy, Regulations
Is Privacy Profitable?
It is evident that a company must invest in its privacy practices to meet legal requirements if it wants to avoid investigation costs and potential civil penalties. But can investment in privacy, data security, and data management bring benefits to…
Jury Verdict in TCPA Case Puts Over $925 Million In Damages On The Table
On April 12, 2019, an Oregon federal jury returned a Friday evening verdict in a Telephone Consumer Protection Act (TCPA) class action that could put the defendant on the hook for $925 million in damages. The TCPA makes it unlawful…
