Krebs on Security

APRIL 30, 2024

Kurittu said prosecutors knocked a few months off of Kivimäki’s sentence because he agreed to pay compensation to his victims, and that Kivimäki will remain in prison during any appeal process. After being charged with the attack in October 2022, Kivimäki fled the country.

Passwords 228

Passwords Access Security IT 228

The Guardian Data Protection

FEBRUARY 12, 2018

Firm to appeal decision by Berlin regional court which upholds complaints that users not given informed consent Facebook’s default privacy settings and use of personal data are against German consumer law, according to a judgement handed down by a Berlin regional court.

Personal data 223

Personal data Privacy GDPR IT 223

eDiscovery Daily

FEBRUARY 14, 2019

Plaintiff’s response to prior court orders, which consisted of a HIPAA authorization refused by Facebook, some obviously immaterial postings, and a vague affidavit claiming to no longer have the photographs, did not comply with his discovery obligations. 3d 617, 618, 931 N.Y.S.2d 2d 311 [1st Dept. Pollari, 107 A.D.3d 2d 31 [1st Dept.

Mining 44

Mining Education Access Privacy 44

Data Protection Report

APRIL 30, 2021

German Federal Labour Court dismissed employee’s claim. On 27 April 2021, the German Federal Labour Court ( Bundesarbeitsgericht , the Federal Court ) held that employees cannot request their employer to provide them with copies of all (i) the employee’s entire email correspondence; and (ii) any emails mentioning the employee by name.

GDPR 105

GDPR Personal data Access IT 105

DLA Piper Privacy Matters

NOVEMBER 10, 2021

On 10 November 2021, the UK Supreme Court, in a unanimous judgment, allowed Google’s appeal against the Court of Appeal decision granting Mr Lloyd permission to continue his representative claim (i.e. a US-style opt-out “class action”) against Google.

IT 98

IT 98

Hunton Privacy

APRIL 12, 2013

On April 9, 2013, the United States Court of Appeals for the Eleventh Circuit held that the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) preempted a Florida law regarding the disclosure of patient records by nursing homes. View the Court’s opinion.

Privacy 40

Privacy Insurance 40

DLA Piper Privacy Matters

SEPTEMBER 27, 2022

The Singapore Court of Appeal has recently clarified that ‘emotional distress’ is an actionable loss and damage under the existing right of private action of Personal Data Protection Act 2012 (“ PDPA “). In the Singapore Court of Appeal in Michael Reed v. Introduction. Other takeaways.

Personal data 98

Personal data Communications 98

Data Protection Report

JANUARY 9, 2023

Privacy developments in Singapore – enhanced financial penalties under Personal Data Protection Act 2012 (Singapore PDPA), Singapore Court of Appeal clarifies right to private action under PDPA and Singapore High Court holds IT vendor liable and awards SGD 8.7m Singapore High Court holds IT vendor liable and awards SGD 8.7m

Cybersecurity 113

Cybersecurity Personal data Data breaches Ransomware 113

Security Affairs

FEBRUARY 19, 2024

The Raccoon Infostealer operator, Mark Sokolovsky , was extradited to the US from the Netherlands to appear in a US court. He appealed the decision of a Dutch Court for granting his extradition to the United States, but it was finally extradited to the US from the Netherlands to appear in a US court. in the stolen data.

Sales 92

Sales IT Information Security Security 92

Data Protection Report

JANUARY 16, 2023

In three recent cases, the Court of Appeal for Ontario effectively curtailed the ability of privacy breach victims to advance claims under the tort of intrusion upon seclusion against organizations for failing to prevent unauthorized access to personal information by third parties. Background. Holdings and Reasons.

Privacy 98

Privacy Data breaches Risk Access 98

DLA Piper Privacy Matters

JULY 21, 2020

The Irish Court of Appeal has clarified the scope of the definition of personal data – noting that, while the definition is deliberately very broad, it does not facilitate access by an individual to reports stemming from a complaint for the sole reason that the complaint was made by that individual. Background .

Personal data 99

Personal data Access Compliance Privacy 99

DLA Piper Privacy Matters

JULY 28, 2022

On 27 July 2022, the highest administrative court in the Netherlands, published its highly anticipated judgment involving the Dutch Data Protection Authority’s assessment of “legitimate interest” under Article 6(1)(f) GDPR. In the Dutch Authority’s view, a legitimate interest cannot be broadly interpreted and should follow from the law.

GDPR 105

GDPR Personal data Privacy IT 105

Data Matters

JULY 16, 2020

The Supreme Court has recently granted Google permission to appeal the Court of Appeal’s decision in the case of Lloyd v Google LLC ([2019]) EWCA Civ 1599). Google is now appealing the Court of Appeal’s decision granting Mr Lloyd permission to serve his representative action on Google. to the U.S.

Personal data 92

Personal data GDPR Privacy Data Privacy 92

DLA Piper Privacy Matters

SEPTEMBER 15, 2021

All this local gold-plating may have now been blown-out by a decision of the Spanish Supreme Court dated 14 September 2021. The Supreme Regional Court of Galicia found these measures disproportionate and the Galician government appealed to the Spanish Supreme Court (which had already dismissed similar measures from the region of Andalusia).

GDPR 130

GDPR Privacy Government Personal data 130

Hunton Privacy

APRIL 22, 2021

As reported on the Hunton Retail Law Blog , on April 22, 2021, the U.S. Supreme Court unanimously held in a highly-anticipated case, AMG Capital Management, LLC v. The FTC sued AMG and Tucker in 2012, alleging in federal court that the defendants had engaged in unfair and deceptive practices in violation of §5(a) of the FTC Act.

Retail 82

Retail IT 82

Hunton Privacy

NOVEMBER 10, 2021

On November 10, 2021, the UK Supreme Court issued its long-awaited judgment in the Lloyd v Google case. Pursuant to the UK’s Civil Procedure Rules, Lloyd was required to seek permission of the court to serve his claim outside of the UK against Google in the U.S.

GDPR 104

GDPR Personal data IT 104

eDiscovery Law

APRIL 7, 2023

Courts throughout the United States have different perspectives on the actions that constitute spoliation of evidence and the situations in which these actions should be sanctioned. Furthermore, as courts examine and re-examine these concepts over time, their perspectives shift.

e-Discovery 40

e-Discovery Data preservation 40

eDiscovery Law

APRIL 7, 2023

Courts throughout the United States have different perspectives on the actions that constitute spoliation of evidence and the situations in which these actions should be sanctioned. Furthermore, as courts examine and re-examine these concepts over time, their perspectives shift.

e-Discovery 40

e-Discovery Data preservation 40

Krebs on Security

JANUARY 25, 2022

What’s worse than finding out that identity thieves took out a 546 percent interest payday loan in your name? How about a 900 percent interest loan? Or how about not learning of the fraudulent loan until it gets handed off to collection agents? ” Last May, someone applied for some type of loan in Jim’s name. Then on Nov.

Financial Services 210

Financial Services IT Data breaches Authentication 210

CILIP

JANUARY 22, 2024

Harmonisation with EU copyright law however shifted the UK away from its relatively low bar of a ‘skill and labour’ test for originality. Harmonisation with EU copyright law however shifted the UK away from its relatively low bar of a ‘skill and labour’ test for originality. Copyright: The demise of ‘skill, labour and effort’?

Access 76

Access IT 76

Hunton Privacy

AUGUST 6, 2021

On July 30, 2021, the UK High Court handed down its judgment in the case of Warren v DSG Retail Ltd [2021] EWHC 2168 (QB), determining that the claimant could not seek damages on the basis of misuse of personal information, breach of confidence or common law negligence following a data breach. That fine is under appeal.

Data breaches 116

Data breaches Retail Sales Personal data 116

Data Protection Report

SEPTEMBER 28, 2021

You may not believe that dogs have much to do with privacy and security, but on September 20, 2021, New Jersey’s highest state court ruled that dog owners’ names and addresses were public and therefore not exempt from disclosure by a city dog licensing authority, but other information (such as dog breed and name) raised security concerns.

Privacy 139

Privacy Security Risk Manufacturing 139

IG Guru

APRIL 12, 2023

Check out the article here.

Records Management 65

Records Management 65

Data Protection Report

NOVEMBER 16, 2022

Since its enactment in 2008, BIPA has been one of the most litigated privacy-related laws with some of the highest penalties. The award, a whopping $228 million, cements BIPA as one of the most important laws for businesses to be aware of when shaping their privacy practices. Who is covered by BIPA? 740 ILCS 14/25(b)-(c).

Financial Services 98

Financial Services Privacy Compliance Insurance 98

Data Protection Report

MARCH 1, 2023

On February 17, 2023, the Illinois Supreme Court decided, by a 4-3 vote, that each time a private entity scans or transmits an individual’s biometric information without complying with Illinois Biometric Information Privacy Act (BIPA), that constitutes a separate violation under BIPA. ( Cothron v. White Castle System, Inc.,

Access 52

Access Privacy IT 52

Data Protection Report

DECEMBER 8, 2022

1] This case was the first of its kind and confirms an insurer’s ability to seek recovery for losses suffered when it reimburses its insureds for ransoms that are later recovered through law enforcement action. Major NetWalker arrest leads to significant asset seizure and plea deal. Client obtains relief from forfeiture.

Ransomware 98

Ransomware Insurance IT Data breaches 98

Data Protection Report

DECEMBER 8, 2022

On November 30, 2022, an Illinois court of appeals ruled that Illinois’ biometrics privacy law—known as BIPA—requires that anyone subject to that law must develop a retention and destruction schedule when it possesses biometric data. In this case , the court found that the employer (J&M Plating Inc.)

Privacy 52

Privacy Government IT 52

Data Protection Report

DECEMBER 6, 2022

On November 30, 2022, an Illinois court of appeals ruled that Illinois’ biometrics privacy law—known as BIPA—requires that anyone subject to that law must develop a retention and destruction schedule when it possesses biometric data. In this case , the court found that the employer (J&M Plating Inc.)

Privacy 52

Privacy Government IT 52

Hunton Privacy

APRIL 5, 2021

On April 1, 2021, California’s Supreme Court ruled unanimously that the state’s prohibition on recording calls without consent applies to parties on the call and not just third-party eavesdroppers. Writing for the Court, Chief Justice Tani G. Read the Court’s full opinion.

Communications 48

Communications Privacy Personal data IT 48

Data Protection Report

JULY 28, 2021

Germany’s highest civil court, the Federal Court Of Justice ( Bundesgerichtshof , the FCJ ), has just published a decision specifying the scope of data subject access requests (DSARs). The claimant appealed this decision to the FCJ. The defendant was a life insurance company and the claimant their insured.

Access 128

Access GDPR Personal data Insurance 128

DLA Piper Privacy Matters

MARCH 22, 2021

The Electronic Communications Privacy Act (ECPA) is a law noted for its complexity, and the second portion of it, the Stored Communications Act (SCA) is no exception. In a recent case in the Seventh Circuit, the District Court for the Northern District of Illinois examined the scope of the SCA and what it was, and was not, intended to cover.

Communications 95

Communications Computer and Electronics Access Privacy 95

DLA Piper Privacy Matters

JUNE 25, 2020

In the eagerly awaited decision in the proceedings against Facebook for abuse of a dominant position ( KVR 69/19 – decision of 23 June 2020 ), the German Federal Court of Justice (“FCJ”) provisionally confirmed the decision of the German Federal Cartel Office (“FCO”). Accordingly, the court has not made any statement on this matter.

Marketing 98

Marketing Personal data GDPR Analytics 98

Data Matters

DECEMBER 16, 2019

Kate also served as a law clerk to Chief Justice John G. Supreme Court and Judge Merrick B. Court of Appeals for the D.C. Tomoki’s practice areas include data privacy law, intellectual property law, entertainment law, litigation and arbitration. Roberts, Jr. on the U.S. Garland on the U.S.

Energy and Utilities 78

Energy and Utilities Privacy Financial Services Data Privacy 78

Hunton Privacy

JANUARY 16, 2021

The United States Court of Appeals for the Fifth Circuit recently vacated a $4.3 The Court held that OCR’s civil monetary penalty for alleged violations of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Privacy Rule and HIPAA Security Rule was “arbitrary, capricious, and otherwise unlawful.”.

Encryption 71

Encryption Privacy Insurance Security 71

Hunton Privacy

APRIL 27, 2021

As reported on the Hunton Retail Law Blog , on April 26, 2021, the U.S. Court of Appeals for the Second Circuit affirmed the dismissal on Article III standing grounds of a data breach class action predicated on an alleged increased risk of identity theft. McMorris v. Carlos Lopez & Assocs. , 19-4310, 2021 WL 1603808 (2d Cir.

Data breaches 88

Data breaches Risk Retail Education 88

DLA Piper Privacy Matters

JUNE 23, 2021

They seek to address the requirements of the Schrems II decision of the Court of Justice of the European Union last year and follow the publication earlier this month of the European Commission final Implementing Decision on standard contractual clauses for the transfer of personal data to third countries. Key takeaways.

GDPR 99

GDPR Personal data Compliance Risk 99

Hunton Privacy

JUNE 8, 2021

Supreme Court in Van Buren v. The Court addressed a split in authority among the circuits regarding the scope of liability under the CFAA. On June 3, 2021, the U.S. United States reversed the U.S. Van Buren, the target of an FBI sting operation, had accessed the database to look up license plate information in exchange for money.

Access 78

Access IT 78