New York Enacts New Data Security Laws

By Paul Otto, W. James Denvil, Julian Flamant & Peter Marta on August 12, 2019

On July 25, New York Governor Andrew Cuomo signed into law a pair of bills establishing new requirements for businesses that process certain personal information related to New York residents. The changes include expanding the scope of information covered by New York’s data breach notification law; defining breaches to include incidents involving unauthorized access to covered information, even where the information is not acquired; and requiring consumer reporting agencies who suffer breaches of social security…

Global Media and Communications Watch

California Consumer Privacy Act: the Challenge Ahead – Data Mapping and the CCPA

By Mark Brennan, W. James Denvil & Aaron Lariviere on September 20, 2018

This is the third installment in Hogan Lovells’ series on the California Consumer Privacy Act. What personal information do you have about California consumers and households? The California Consumer Privacy Act of 2018 (“CCPA”) provides a series of new compliance obligations and operational challenges for companies doing business in California. A vital first step for any company subject to the CCPA and looking to forge a practical path forward is to inventory the personal information…

Global Media and Communications Watch

Navigating the Road Ahead: Auto Industry Stakeholders and Regulators Convene to Discuss Connected Vehicle Privacy

By Timothy Tobin & W. James Denvil on January 30, 2018

In the same week that the automotive industry gathers in Washington, D.C. for the 2018 Washington Auto Show, a cross-section of automotive stakeholders, government officials, and consumer and privacy advocates came together at Hogan Lovells’ Washington office to discuss privacy issues facing connected vehicles. The half-day conference, co-hosted by Hogan Lovells and the Future of Privacy Forum, convened on January 23, with the theme of “Privacy and the Connected Vehicle: Navigating the Road Ahead.” Panels focused on…

Global Media and Communications Watch

FTC and NHTSA to Explore Vehicle Privacy and Security Issues

By W. James Denvil & Timothy Tobin on March 30, 2017

The Federal Trade Commission (FTC) and National Highway Traffic Safety Administration (NHTSA) are co-hosting a workshop on June 28, 2017, to explore the privacy and security issues raised by automated and connected vehicle technologies. The agencies are looking to explore the types of data such technologies collect, store, transmit, and share; the potential benefits and challenges posed by the technologies; the privacy and security practices of vehicle manufacturers; the roles that federal agencies should play…

Global Media and Communications Watch

Second Circuit Holds That U.S. Cannot Compel By Warrant Microsoft’s Production of Emails Stored Outside of U.S., Citing The Stored Communications Act’s Privacy Protections and Lack of Extraterritorial Effect

By Timothy Tobin & W. James Denvil on July 18, 2016

A three-judge panel of the U.S. Court of Appeals for the Second Circuit today unanimously reversed a lower court’s denial of Microsoft’s motion to quash a warrant seeking the content of emails for a customer of its Outlook.com email service. The decision is surprising in that that U.S. courts, including the Second Circuit, have traditionally enforced government process seeking documents or data stored abroad from entities that have control over the information under the test…

Global Media and Communications Watch

FTC Says Listen Up When Vulnerability Reports Come In

By W. James Denvil & Paul Otto on March 1, 2016

The FTC wants companies to listen. More precisely, the FTC wants companies to pay attention to and promptly to respond to reports of security vulnerabilities. That’s a key takeaway from the Commission’s recent settlement with ASUSTek (“ASUS”). In its complaint against the Taiwanese router manufacturer, the FTC alleged that ASUS misrepresented its security practices and failed to reasonably secure its router software. The Commission cited the company’s alleged failure to address vulnerability reports as one…

Global Media and Communications Watch

Colombian Data Protection Authority Requires Database Registration

By W. James Denvil on December 23, 2015

The Colombian Data Protection Authority (the Superintendence of Industry and Commerce, or SIC) has issued regulations requiring all data controllers that are (i) private legal entities registered in Chambers of Commerce in Colombia (i.e., incorporated in Colombia) or (ii) partially government owned corporations (“sociedades de economía mixta”) to register their databases by November 8, 2016. The regulations were issued on November 3, 2015, and the National Database Registry (the “Registry”) required by Colombian data protection…

W. James Denvil

New York Enacts New Data Security Laws

California Consumer Privacy Act: the Challenge Ahead – Data Mapping and the CCPA

Navigating the Road Ahead: Auto Industry Stakeholders and Regulators Convene to Discuss Connected Vehicle Privacy

FTC and NHTSA to Explore Vehicle Privacy and Security Issues

Second Circuit Holds That U.S. Cannot Compel By Warrant Microsoft’s Production of Emails Stored Outside of U.S., Citing The Stored Communications Act’s Privacy Protections and Lack of Extraterritorial Effect

FTC Says Listen Up When Vulnerability Reports Come In

Colombian Data Protection Authority Requires Database Registration

Company

Support

New to the Network