After over a decade, the first action has been filed that may test the bounds of the Support Anti-Terrorism by Fostering Effective Technologies Act (“SAFETY Act”) of 2002. MGM Resorts International recently filed suit related to the October 2017 Mandalay
Data Law Insights
Legal insights on navigating privacy, data protection, cybersecurity, information governance, and e-discovery
Data Law Insights, published by Crowell & Moring LLP, focuses on legal issues surrounding data privacy, cybersecurity, and technology law. The blog covers topics such as compliance with privacy statutes like the California Invasion of Privacy Act (CIPA), interpretation of privacy laws in the context of new technologies, and liability risks for companies operating websites and digital services. It also addresses regulatory developments including the EU's NIS2 Directive on cybersecurity obligations for essential and important entities, and the implications for businesses operating across jurisdictions. The blog provides analysis on managing legal risks related to data collection, consent, and information security in evolving technological landscapes.
Latest from Data Law Insights - Page 11
Upcoming NIST Hosted DFARS Safeguarding Clause & CUI Training – October 18, 2018
By Kate Growley
The National Institute of Standards and Technology (“NIST”) is hosting a cybersecurity workshop on the Defense Federal Acquisition Regulation System (“DFARS”) Safeguarding Clause and related regulations on Thursday, October 18, 2018. The workshop, in coordination with the Department of Defense…
Colorado’s New Data Privacy Bill Increases Notification and Safeguarding Requirements
The Colorado legislature recently passed a new data privacy law, House Bill 18-1128, which heightens requirements for corporate and public entities handling personal information of Colorado residents. Effective September 1, 2018, the law aims to strengthen consumer data privacy…
The CLOUD Act and the Future of International Access to E-Evidence
Attorney General Jeff Sessions and EU Justice Commissioner Věra Jourová have met twice over the last two weeks, signaling momentum towards a new EU-U.S. solution for the sharing of electronic evidence. These meetings occurred in the wake of proposed regulations…
Seventh Circuit Revives Data Breach Case Despite No Evidence Of Monetary Harm
The U.S. Court of Appeals for the Seventh Circuit (the “7th Circuit”) recently issued an opinion in Heather Dieffenbach, et al. v. Barnes & Noble, Inc. that is potentially concerning for current and potential defendants in class action claims related…
Political Data Firm Improperly Accessed Facebook Users’ Data
Facebook faces government investigations on both sides of the Atlantic after recent revelations that Cambridge Analytica, a British political data firm with ties to President Trump’s 2016 campaign, collected and used the personal information of more than 50 million Facebook…
Ninth Circuit Revives Data Breach Class Action, Finds Risk of Identity Theft Without Actual Harm Sufficient to Establish Standing
Last week, the U.S. Court of Appeals for the Ninth Circuit revived a class action lawsuit related to a 2012 data breach, determining that the future risk of identity theft suffices to establish Article III standing, even where there has…
PayPal Settles FTC Claims Regarding Venmo’s Disclosure, Privacy, and Security Practices
On February 27, 2018, the Federal Trade Commission (“FTC”) announced a proposed administrative settlement with PayPal, Inc. over allegations that the company failed to make adequate disclosures to users regarding its Venmo peer-to-peer payment service. The settlement underscores the importance…
Learn about how Regulation Will Shape Digital Transformation in Crowell & Moring’s 2018 Regulatory Forecast Cover Story: “Digital Transformation: The Sky’s The Limit”
Crowell & Moring has issued its “Regulatory Forecast 2018: What Corporate Counsel Need to Know for the Coming Year.”
The Forecast cover story, “Digital Transformation: The Sky’s the Limit,” provides a look at how technology is…
U.S. Securities and Exchange Commission Ups the Ante for Addressing Corporate Cyber Risks
On February 21, 2018, the U.S. Securities and Exchange Commission (“SEC”) voted unanimously to disseminate its Statement and Guidance on Public Company Cybersecurity Disclosures, an “interpretive guidance” designed to help publicly-traded companies satisfy their cybersecurity risk disclosure obligations. The…