On May 19, 2022, the Federal Trade Commission voted 5-0 to adopt a policy statement regarding increased scrutiny of the Children’s Online Privacy Protection Act (COPPA) violations involving education technology companies. The statement reaffirmed COPPA provisions around limiting educational technology’s
Balch & Bingham LLP Blogs
Latest from Balch & Bingham LLP
NIST Releases Draft Report on Blockchain for Access Control Systems for Public Comment
On December 20, 2021, The National Institute of Standards and Technology (NIST) released its draft interagency report 8403 on “Blockchain for Access Control Systems”. As the report’s abstract states:
“Protecting system resources against unauthorized access is the primary objective of
Financial Regulators Issue New Cyber Incident Reporting Rule for U.S. Banks and Service Providers
On November 18, 2021, the Federal Reserve, Federal Deposit Insurance Corporation (FDIC), and the Office of the Comptroller of the Currency (OCC) approved a new final rule regarding reporting of cyber incidents for U.S. banks and service providers.
Under the
Senate Introduces Legislation Requiring 24-hour Ransomware Notification
A new bill introduced by the Senate (S. 2666), the “Sanction and Stop Ransomware Act of 2021”, would require a strict 24-hour limit for reporting ransomware payments for businesses with more than 50 employees. The bipartisan bill, put forward by
California Privacy Protection Agency (CPPA) Invites Comments on Proposed Rulemaking
Background
Yesterday, on September 22, 2021, the California Privacy Protection Agency (“CPPA”) — the new privacy regulatory agency created by the California Privacy Rights Act of 2020 (“CPRA” or “CCPA 2.0”) — issued an invitation for public comment on
SEC Issues Cybersecurity Sanctions Against Eight Firms
Background
On August 30, 2021, the Securities and Exchange Commission (SEC) sanctioned eight firms in three actions for cybersecurity failures in their policies and procedures that exposed the personal information of thousands of customers at each firm. These firms included:
Eleventh Circuit Affirms $380.5M Class Action Settlement in Equifax Data Breach Litigation
Last week, the United States Court of Appeals for the Eleventh Circuit affirmed the $380.5M settlement in the Equifax data breach class actions – a settlement which the district court called “the largest and most comprehensive recovery in a data
Eleventh Circuit’s “Narrow” Holding May Open Wide Disputes About Duties Under The FCRA
The Eleventh Circuit recently weighed in on a common practice—reporting debts subject to bankruptcy. In the process of so doing, the opinion in Losch v. Nationstar Mortgage LLC provided litigants some key insights in Fair Credit Reporting Act (“FCRA”) compliance
President Biden Issues Executive Order on Cybersecurity
On May 12, 2021, President Biden issued an executive order to strengthen U.S. cybersecurity defenses. The order comes in the wake of the ransomware attack on Colonial Pipeline and numerous other cybersecurity attacks against the U.S. government and private companies
Eleventh Circuit holds commonplace use of letter vendors may violate FDCPA and further expands consumer standing in Huntstein v. Preferred Collection
To start with the headline, on April 21, 2021, the Eleventh Circuit Court of Appeals held that a debt collector sending personal identifying information to dunning letter vendors states a claim under the Fair Debt Collection Practices Act (FDCPA). To