On December 19, 2022, the United States Federal Trade Commission (“FTC”) announced two separate record-breaking settlements with Epic Games, Inc. (“Epic”), the video game publisher behind the popular online multiplayer game “Fortnite,” totaling over $520 million for alleged violations of
Cleary Cybersecurity and Privacy Watch
Global Legal Developments related to Cybersecurity Incidents, Cyber Corporate Governance and Regulation Issues, and Privacy and Data Protection Laws
Cleary Cybersecurity and Privacy Watch, published by Cleary Gottlieb Steen & Hamilton LLP, focuses on legal developments and regulatory issues related to cybersecurity, data privacy, and emerging technologies. The blog covers topics such as GDPR compliance, data breach liability, AI-related cyber threats, government enforcement actions, and evolving privacy laws. It also addresses the intersection of cybersecurity with corporate governance, international trade, and regulatory compliance. The blog provides analysis of court rulings, legislative initiatives, and enforcement trends affecting companies and legal practitioners navigating cybersecurity and privacy challenges.
Latest from Cleary Cybersecurity and Privacy Watch - Page 6
The Draft Adequacy Decision on the EU-US Data Privacy Framework
On December 13, 2022, the European Commission (“Commission”) formally launched the process to adopt an adequacy decision for the EU – U.S. Data Privacy Framework and proposed a draft adequacy decision concerning personal data transfers to the U.S. (available here…
The United Kingdom and the Republic of Korea Finalize Data Sharing Agreement
On 24 November 2022, the UK government announced its adequacy decision for the Republic of Korea, which will allow UK organizations to share personal data with Korean organizations more freely under the UK General Data Protection Regulation (“UK GDPR”).…
UK ICO Issues Draft Guidance on Monitoring at Work
The Information Commissioner’s Office (“ICO”) has opened a consultation on new draft guidance on monitoring at work (the “Draft Guidance”). The Draft Guidance applies in both the private and public sectors in respect of any worker, a term which is…
President Biden Signs Executive Order on New EU-US Data Privacy Framework
Today, after over two years of detailed negotiations, President Joe Biden signed an Executive Order on Enhancing Safeguards for United States Signals Intelligence Activities (the “Order”) outlining steps the U.S. will take to implement its commitments under the European Union-U.S.…
California Refuses to “Kid Around” on Children’s Privacy With Enactment of the California Age Appropriate Design Code
Determined to maintain its position as a pioneer for consumer privacy rights, California is again among the first to take action to tackle issues of children’s safety and privacy online with the enactment of the California Age-Appropriate Design Code (the…
UK’s Data Protection and Digital Information Bill: An Uncertain Direction
On September 5, 2022, following the election of the new UK Prime Minister, the UK Government decided not to proceed with the second reading and other motions relating to the Data Protection and Digital Information Bill (the “Bill”), which was…
DFS Enters Consent Order with Robinhood Crypto for Deficiencies in AML, Cybersecurity, and Virtual Currency Compliance
On August 1, 2022, Robinhood Crypto LLC (“RHC”) entered into a Consent Order with the New York Department of Financial Services (“DFS”) based on “serious deficiencies” related to anti-money laundering (“AML”), cybersecurity, and virtual currency that were identified in DFS’s…
European Health Data Space – The Commission’s Proposal on a Single Market For Digital Health Services, Products, and Data
On May 3, 2022, the European Commission published its proposal for a regulation on the “European Health Data Space”.
The EHDS is a talismanic European healthtech initiative that could revolutionize access to a deeper pool of EU-wide health data and…
New England’s New Privacy Act: Connecticut Becomes the Fifth State To Enact Comprehensive Data Privacy Act
After a failed attempt in 2021, Connecticut has become the fifth U.S. state to enact comprehensive data privacy legislation with the passing of “An Act Concerning Personal Data Privacy and Online Monitoring” or the Connecticut Data Privacy Act (the “CDPA”…