With the passage of the Colorado Privacy Act, Colorado joins Virginia and California as early adopters of state-level privacy legislation. These laws impose higher restrictions on companies processing specific sensitive categories of data that reveal information such as sexual orientation
Continue Reading New State Privacy Laws Impose Higher Restrictions on Processing Sensitive Personal Data
Data Privacy + Cybersecurity Insider
Leveraging Knowledge to Manage Your Data Risks
Latest from Data Privacy + Cybersecurity Insider - Page 2
Companies Still Struggling with Implementing Backup Plans
Backup plans continue to be one of the most important ways to respond to a ransomware attack. If you have a backup plan, have tested it, and can migrate to it, you are better equipped to be able to respond…
Continue Reading Companies Still Struggling with Implementing Backup Plans
Privacy Tip #307 – Credit Card Skimming Devices Found at Costco
Credit card skimming fraud continues to affect companies and their customers, causing businesses such as Costco to routinely inspect their PIN pads for the devices. According to news reports, following a routine inspection of its PIN pads, five card-skimming devices…
Continue Reading Privacy Tip #307 – Credit Card Skimming Devices Found at Costco
CISA Issues Incident Response + Vulnerability Response Playbooks For Executive Branch
The Cybersecurity & Infrastructure Security Agency (CISA) issued the Cybersecurity Incident & Vulnerability Response Playbooks: Operational Procedures for Planning and Conducting Cybersecurity Incident and Vulnerability Response Activities in FCEB Information Systems (Playbooks) on November 16, 2021, designed to assist Federal…
Continue Reading CISA Issues Incident Response + Vulnerability Response Playbooks For Executive Branch
November’s Patch Tuesday Includes 55 Patches
Staying current with Microsoft’s monthly patches is challenging, yet critical for one’s cybersecurity program. This week, Microsoft’s November Patch Tuesday released 55 patches, six of which were categorized as “critical,” four were previously disclosed (which means that cyber criminals may…
Continue Reading November’s Patch Tuesday Includes 55 Patches
CISA Issues Binding Operational Directive on Patching Vulnerabilities
The Cybersecurity and Infrastructure Security Agency (CISA) recently issued a Binding Operational Directive requiring all federal agencies to apply patches to new and old vulnerabilities that are being exploited in the wild.
The Directive, entitled Reducing the Significant Risk of…
Continue Reading CISA Issues Binding Operational Directive on Patching Vulnerabilities
Class Action Against Shopify Dismissed for Lack of Jurisdiction
The U.S. District Court for the Northern District of California dismissed a consumer class action against Ledger SAS’s e-commerce vendor Shopify Inc. because of its locale – Shopify is headquartered in Ottawa, Canada. Judge Edward M. Chen said in his…
Continue Reading Class Action Against Shopify Dismissed for Lack of Jurisdiction
Phoenix Children’s Hospital Faces Privacy Lawsuit Over Inadvertent Release of Vaccine Exemption Information
An apparent email snafu has led to the filing of a putative class action against the Phoenix Children’s Hospital. The allegations stem from an email that was allegedly sent out to 368 people that outlined the protocols for employees with…
Continue Reading Phoenix Children’s Hospital Faces Privacy Lawsuit Over Inadvertent Release of Vaccine Exemption Information
Privacy Tip #306 – Quick Read on Data Privacy Issues in 2020
I’m on vacation this week, and while most people read novels while on vacation, I catch up on data privacy articles and publications that I have set aside and haven’t had a chance to read. I just finished one that…
Continue Reading Privacy Tip #306 – Quick Read on Data Privacy Issues in 2020
FTC Releases Guidance on Negative Option Marketing
The Federal Trade Commission released a new enforcement policy statement on October 28, 2021, targeting the practice known as “Negative Option Marketing.” Negative Option Marketing is the practice of taking consumers’ silence as tacit consent in various circumstances, including automatic…
Continue Reading FTC Releases Guidance on Negative Option Marketing