Data Protection Report

MARCH 21, 2023

We had previously written about an FTC proposed consent order that would prohibit a company from perpetual retention of personal health information. that would prohibit the company from perpetual retention of personal information—a broader category.

Privacy 59

Privacy Compliance Personal data Government 59

Data Matters

JANUARY 23, 2020

The UK will leave the EU on January 31, 2020 ( Brexit ), under the terms of the EU (Withdrawal Agreement) Bill, which is currently going through the legislative stages of the UK Houses of Parliament, and is widely expected to enter into law. the appointment of a DPR does not affect the liability or responsibility of the company.

GDPR 76

GDPR Privacy Compliance IT 76

Thales Cloud Protection & Licensing

SEPTEMBER 19, 2019

Yet most people don’t trust the companies they’re sharing data with, according to a new market trends study published by Gartner. In fact, 75% of consumers worry their online accounts may be hacked and the vast majority also believe companies are using or sharing their data without even telling them, according to the study.

Security 96

Security Personal data Encryption Data breaches 96

Data Protection Report

NOVEMBER 7, 2018

s browsewrap agreement was unenforceable and denied Viacom’s request to stay the case pending arbitration. [1] is consistent with “courts’ traditional reluctance to enforce browsewrap agreements against individual consumers.” [2]. Clickwrap versus Browsewrap Agreements. Reluctance to Enforce Browsewrap Agreements.

Access 40

Access Privacy Risk Government 40

Data Matters

MARCH 17, 2021

The position paper provides guidance for companies that are subject to the revDPA as to how to meet its requirements once it enters into force, which is expected to be in the second half of 2022 after the Federal Administration has completed drafting the associated implementing ordinances.

GDPR 79

GDPR Personal data Paper Privacy 79

Security Affairs

MAY 12, 2021

After the introduction of CCPA and GDPR, much more attention is given to third-party risks, and the privacy terms and conditions users agree to. Global privacy regulations, such as the CCPA and GDPR, were enacted to ensure stricter standards when handling the personal data of consumers. Importance of Vendor Assessment.

GDPR 83

GDPR Privacy Personal data Data breaches 83

DLA Piper Privacy Matters

OCTOBER 13, 2020

In its decision of 18 September 2020 (case number 2-27 O 100/20, available here – in German only), the Regional Court Frankfurt am Main had to decide on a civil action brought by an individual against the Belgian subsidiary of an international credit card company. The decision. The District Court dismissed both claims.

GDPR 103

GDPR Data breaches Personal data Access 103

Data Matters

FEBRUARY 11, 2021

On February 5, 2021, the UK Supreme Court ruled that the Serious Fraud Office (SFO) cannot compel foreign companies with no presence in the jurisdiction to produce documents held abroad using its powers under Section 2(3) of the Criminal Justice Act 1987 (CJA 1987). Background. Department of Justice and the Securities and Exchange Commission.

IT 68

IT Compliance Privacy Security 68

Data Protection Report

APRIL 12, 2019

UFC asked the judges to declare Google’s policies unlawful and abusive, on the grounds that they did not respect consumers’ privacy and personal data. The key findings of the TGI in the Google case are set out below: The terms of use of a social network are subject to consumer law.

Privacy 40

Privacy Personal data IT Data Privacy 40

Data Protection Report

MAY 10, 2018

Federal Trade Commission (FTC) released for public comment an administrative complaint and proposed consent agreement with mobile phone manufacturer BLU Products Inc. LTD (a company based outside the U.S.) and its owner and president. BLU does not admit or deny any of the FTC’s allegations. Background.

Privacy 40

Privacy Manufacturing Compliance Retail 40

Data Matters

FEBRUARY 12, 2020

Just as companies were starting to recover from their exertions to put in place California Consumer Privacy Act (“CCPA”) compliance programs before the law’s January 1, 2020 entry into force, the California Attorney General (“AG”) provided an early February surprise.

Privacy 68

Privacy Compliance Archiving Sales 68

Data Matters

NOVEMBER 13, 2017

In recent years, financial technology (fintech) companies have developed products and services that make it easier for consumers to manage their own finances, including financial planning services, transaction verification tools, payment applications and fraud-screening. Data aggregation services.

Financial Services 60

Financial Services Privacy Access Marketing 60

IT Governance

JULY 19, 2018

This week, we discuss a £200,000 fine for the IICSA, a move to suspend the EU-US Privacy Shield, how much a data breach might cost your organisation, and the sentencing of two National Lottery hackers. They then noticed an error in the email and sent another email to correct it. Here are this week’s stories.

Data breaches 66

Data breaches Privacy Personal data Compliance 66

Data Matters

MAY 17, 2018

SB 315 expressly did not apply to: members of the same household; access to a computer of computer network for a “legitimate business activity”; cybersecurity “defensive measures that are designed to prevent or detect unauthorized computer access”; and “violations of terms of service or user agreements.”.

Systems administration 60

Systems administration Cybersecurity Information Security Insurance 60

IT Governance

MAY 15, 2024

Physical access control, physical security monitoring, CCTV, and more When we hear the term ‘information security’ – or, for that matter, ‘ISO 27001’ – our thoughts usually turn straight to cyber security. However, physical security is also an important aspect of information and data security.

Security 52

Security Information Security Access Cloud 52

DLA Piper Privacy Matters

APRIL 9, 2018

Italian companies can now rely on guidelines on how to comply with the European privacy regulation (GDPR) which unvail some interesting positions. . The legitimate interest shall no longer be identified by means of a decision of the data protection authority as on the contrary it was provided by the Italian Privacy Code.

GDPR 40

GDPR Personal data Privacy Data breaches 40

Hunton Privacy

MAY 9, 2014

On May 9, 2014, the Federal Trade Commission announced a settlement with clothing manufacturer American Apparel related to charges that the company falsely claimed to comply with the U.S.-EU EU Safe Harbor Framework, they’re abiding by the terms of the program.”. EU Safe Harbor Framework. EU Safe Harbor Framework and the U.S.-Swiss

Compliance 40

Compliance Privacy Manufacturing Personal data 40

Data Protection Report

FEBRUARY 27, 2019

With significant enforcement activity and new laws being enacted or proposed since the start of the year, regulators in the EU and the US, several US states, and the US Congress are showing they mean business in terms of data privacy. US Congress’ consideration of a first-ever comprehensive US federal privacy law.

Data Privacy 40

Data Privacy GDPR Privacy Risk 40

eDiscovery Daily

FEBRUARY 10, 2019

After the plaintiff’s second motion to compel against the defendants was granted, they agreed to provide the plaintiff with any agreements they had with Charter, but she continued to maintain “her entire subpoena to Charter is valid.”. Case Background. Judge’s Ruling.

Education 43

Education Communications Privacy IT 43

eSecurity Planet

DECEMBER 9, 2021

In small companies where managers cover many roles, an incident might broaden to include personnel and business processes with events such as insider data theft , sexual harassment, embezzlement, or the failure of a machine on an assembly line. We make IT, security, or any business decision by weighing the risks and the rewards.

Insurance 124

Insurance Ransomware Data breaches Cloud 124

Hunton Privacy

SEPTEMBER 15, 2011

On September 12, 2011, the Department of Health and Human Services’ Office of the National Coordinator for Health Information Technology (“ONC”) unveiled a model privacy notice for personal health records (the “PHR Model Privacy Notice”).

Privacy 40

Privacy Healthcare Insurance Personal data 40

Data Matters

DECEMBER 21, 2017

a product identifying employees who might be recruited by other companies). a product identifying employees who might be recruited by other companies). The parties then entered into a standstill agreement pending resolution of hiQ’s motion for preliminary injunction. hiQ Labs, Inc. hiQ Labs, Inc. LinkedIn Corporation (N.D.

Passwords 83

Passwords Marketing Access Privacy 83

Hunton Privacy

JUNE 15, 2016

On June 8, 2016, the Federal Trade Commission announced that Practice Fusion, an electronic health records company, agreed to settle FTC charges that the company misled consumers about the privacy of doctor reviews submitted to the company.

Privacy 40

Privacy Compliance IT 40

ARMA International

JANUARY 20, 2021

The research also looked at the ability to transfer the data within those laws and examined the transfer requirements and limitations from data privacy and protection laws. This is a common frustration among records managers and information governance (IG) professionals. Research Methodology. checks and assignable promissory notes).

Paper 124

Paper Compliance Records Management Personal data 124

Data Matters

SEPTEMBER 3, 2020

NAIC Considers Comments to the Group Capital Calculation Template and Instructions and Related Revisions to the Insurance Holding Company Act . In addition, the NAIC continued to make progress on a number of initiatives during the Summer Meeting, as highlighted by the following activities: 1. GCC Template and Instructions.

Insurance 68

Insurance Paper Artificial Intelligence Big data 68

Hunton Privacy

SEPTEMBER 13, 2016

Recently, the National Privacy Commission (the “Commission”) of the Philippines published the final text of its Implementing Rules and Regulations of Republic Act No. 10173, known as the Data Privacy Act of 2012 (the “IRR”). This may result in less ambiguity and a lower prospect of confusion from the use of the two terms.

Data Privacy 61

Data Privacy Privacy Personal data Data breaches 61

Data Matters

SEPTEMBER 4, 2019

state regulators risk federal preemption of state law unless they adopt the reinsurance collateral reforms included in the Revised CFR Model Laws by September 2022 (which is the date 60 months after signing the EU Covered Agreement). Under Regulation Best Interest (Regulation BI), as adopted by the U.S.

Insurance 68

Insurance Paper Risk Analytics 68

Data Matters

JUNE 29, 2018

Jerry Brown signed into law the California Consumer Privacy Act of 2018 (AB 375). It is intended to give consumers more transparency regarding and control over their data and establishes highly detailed requirements for what companies that collect personal data about California residents must disclose. .

GDPR 79

GDPR Privacy Sales Data breaches 79

Hunton Privacy

SEPTEMBER 23, 2011

The Personal Data Privacy and Security Act of 2011 (the “Leahy Bill”), sponsored by Senator Patrick Leahy (D-VT), would require companies to implement a comprehensive data privacy and security program to protect sensitive personally identifiable information, and notify affected individuals in the event of a security breach.

Data breaches 40

Data breaches Computer and Electronics Data Privacy Personal data 40

Data Matters

JUNE 29, 2018

Jerry Brown signed into law the California Consumer Privacy Act of 2018 (AB 375). It is intended to give consumers more transparency regarding and control over their data and establishes highly detailed requirements for what companies that collect personal data about California residents must disclose. .

GDPR 60

GDPR Privacy Sales Data breaches 60

HL Chronicle of Data Protection

OCTOBER 26, 2018

This is the seventh installment in Hogan Lovells’ series on the California Consumer Privacy Act. After all, the act is named the California Consumer Privacy Act. For example, organizations are to satisfy the core notice obligations by posting the notice on their public-facing website. Why the Uncertainty?

Privacy 40

Privacy Sales Compliance Personal data 40

DLA Piper Privacy Matters

SEPTEMBER 29, 2017

Parent companies of financing companies. In particular, the AU-054 does not cover fraud prevention systems implemented by insurance, capitalization, reassurance, assistance companies or insurance brokers CMF (these companies must refer to Single Authorization No. By Florence Guthfreund-Roland and Mathilde Hallé.

Personal data 40

Personal data Financial Services Risk Insurance 40

eDiscovery Daily

DECEMBER 3, 2017

To put the provisions of the GDPR in context, we should first point out the differing concepts of privacy between the United States and Europe. The US tends to place a high emphasis on the concept of free speech more so than privacy and this emphasis is carried over into the litigation arena. Here’s the first part. Connecticut.

GDPR 44

GDPR IT Personal data Privacy 44

Hunton Privacy

OCTOBER 6, 2009

On October 6, 2009, the Federal Trade Commission (“FTC”) announced proposed settlement agreements with six companies over charges that they falsely claimed membership in the U.S. companies under the jurisdiction of the FTC or the U.S. To join the Safe Harbor, a company must self-certify to the U.S.

Personal data 40

Personal data Compliance Marketing Privacy 40

HL Chronicle of Data Protection

NOVEMBER 30, 2018

This is the eighth installment in Hogan Lovells’ series on the California Consumer Privacy Act. privacy laws, will complicate compliance and business operations. privacy laws, will complicate compliance and business operations. Companies, especially those outside of California, may wonder whether they are subject to the CCPA.

Marketing 40

Marketing Privacy Sales Compliance 40

Data Matters

MAY 13, 2019

It is, therefore, a timely exercise to stop and take stock of your terms and conditions in light of recent developments in the law, consumer expectations, and your legal risk profile. But updating the privacy policy is only one step in protecting your business in this digital economy. Binding the Consumer.

Privacy 74

Privacy Risk Sales Access 74

Security Affairs

OCTOBER 5, 2023

The database contained hundreds of folders, and most of them appeared to hold documents related to individual companies and their customers. I saw information from companies and customers located in the USA, UK, Australia, multiple EU countries, and more. Among other documents, the database contained 2,565,602.dat

Data breaches 105

Data breaches B2B Education Access 105