Published works by David Kessler (US)

Published works

• HHS and state AGs fine ambulance firm over $500,000, require enhanced security, privacy, and data minimization practices

  Data Protection Report · March 6, 2026

  LEX-WK-G27F425B
• Protective order violations lead to sanctions in Uber MDL litigation

  Data Protection Report · February 24, 2026

  LEX-WK-BX162PQA
• Celebrating Global Information Governance Day: Why information governance matters more than ever

  Data Protection Report · February 19, 2026

  LEX-WK-WV9FGFRY
• Privacy Day 2026: Why trust is the new competitive advantage

  Data Protection Report · January 28, 2026

  LEX-WK-2QEX6VRY
• Regulators, including FCC, emphasize third party vendor cybersecurity monitoring requirements

  Data Protection Report · December 19, 2025

  LEX-WK-5ZCVNYYT
• Happy e-Discovery Day

  Data Protection Report · December 4, 2025

  LEX-WK-TYEENMN8
• NYDFS releases guidance on third-party service provider risks

  Data Protection Report · October 30, 2025

  LEX-WK-11QATPHW
• Text messages and the new Texas registration requirement

  Data Protection Report · September 30, 2025

  LEX-WK-EADY8PNY
• NYDFS fines licensee $2 million for lack of email retention policy and MFA

  Data Protection Report · August 19, 2025

  LEX-WK-NCMWJBBG
• FTC’s COPPA Rule changes include AI training consent requirement

  Data Protection Report · June 4, 2025

  LEX-WK-1JFA0F1R
• North Dakota law heightens data security requirements for some financial institutions

  Data Protection Report · April 28, 2025

  LEX-WK-H840CT12
• The differences between non-disclosure, exfiltration and notice – a court’s view

  Data Protection Report · March 19, 2025

  LEX-WK-ZAMMHMZ6
• Happy Information Governance Day

  Data Protection Report · February 20, 2025

  LEX-WK-VCMZ3VH9
• FTC settlement requires disconnection of hardware from all no longer supported software

  Data Protection Report · February 18, 2025

  LEX-WK-01Z2H86B
• US Dept of Health proposes Security Rule amendments that includes new deadlines

  Data Protection Report · February 4, 2025

  LEX-WK-9DE7Z3WD
• $3 million HIPAA Settlement

  Data Protection Report · January 21, 2025

  LEX-WK-9HDFGPRB
• Two HIPAA settlements, $1.6 million in penalties

  Data Protection Report · December 20, 2024

  LEX-WK-7N18A24T
• New York hospitals have new cybersecurity requirements

  Data Protection Report · October 23, 2024

  LEX-WK-KHQQFC4T
• New York Department of Financial Services addresses cybersecurity risks from artificial intelligence

  Data Protection Report · October 17, 2024

  LEX-WK-STDP6E8G
• Security cameras, CAN-SPAM, and “reasonable or appropriate security”

  Data Protection Report · September 9, 2024

  LEX-WK-35YH7PYZ
• California Attorney General and data security, access and retention

  Data Protection Report · August 28, 2024

  LEX-WK-DQW36NTT
• Violation of HIPAA Security Rule = Violation of NY SHIELD Act

  Data Protection Report · August 22, 2024

  LEX-WK-5E8W5JZE
• Minnesota enacts comprehensive privacy law

  Data Protection Report · June 24, 2024

  LEX-WK-JRMZNTTF
• Is your Texas data protection assessment started?

  Data Protection Report · May 23, 2024

  LEX-WK-G1D3Z3ES
• $10,000,000 civil penalty for disclosing personal data without consent

  Data Protection Report · April 30, 2024

  LEX-WK-869VFXW3