Today, the European General Data Protection Regulation (“GDPR”) takes effect. The GDPR is the most comprehensive and complex privacy regulation currently enacted. The GDPR can apply to a business or organization (including a non-profit organization) anywhere in the world and
Privacy and Cybersecurity Perspectives
Insights into privacy and cybersecurity developments in business and healthcare
Privacy and Cybersecurity Perspectives, published by Murtha Cullina LLP, focuses on legal developments and regulatory issues related to data privacy, cybersecurity threats, and compliance obligations. The blog covers topics such as consumer privacy laws including the California Privacy Rights Act, HIPAA compliance and enforcement actions, cybersecurity risks facing healthcare and other industries, and best practices for managing remote workforce security. It also addresses government enforcement trends, risk analysis requirements, and the impact of evolving privacy regulations on businesses. The content is aimed at helping organizations navigate complex privacy and cybersecurity legal frameworks and implement effective compliance strategies.
Latest from Privacy and Cybersecurity Perspectives - Page 5
Hospital Servers Infected with Malware for Over a Year Affect More than 500,000
Malware-infected servers of a Baltimore hospital system, LifeBridge, may have affected more than half a million patient records. LifeBridge reports in a statement on its website that it discovered malware on the servers that host electronic medical records as well…
DHS Issues Cybersecurity Strategy
The Department of Homeland Security (“DHS”) released its cybersecurity strategy on May 15, 2018. The 35-page document sets forth a plan for managing cybersecurity risks through public and private sector collaboration. By 2023, DHS seeks to have “improved national cybersecurity…
Uber Catches Break in Data Breach Class Action
Uber suffered a data breach in 2014 resulting in the compromise of more than 50,000 drivers’ personal information, including back account and social security numbers. Drivers brought a class action suit in federal court in the U.S. District Court for…
Connecticut’s New Cybersecurity Action Plan
By Barak Cohen
On May 3, 2018, Governor Malloy announced the release of the State of Connecticut’s Cybersecurity Action Plan, which builds on the State’s Cybersecurity Strategy launched in July 2017. Developed by Connecticut’s Chief Cybersecurity Risk Officer Arthur House and Chief Information…
Twitter Becomes the Latest Social Media Company Tangentially Linked to Cambridge Analytica
The conversation surrounding the data we put online continues to heat up. Bloomberg reports that in 2015, Twitter sold access to randomly selected tweets to Aleksandr Kogan, the individual who created the personality quiz that Cambridge Analytica then used to…
Canada Releases New Data Breach Regulations
By Brad Davis*
In a recent post, we discussed the Canadian Cabinet’s announcement that Canada’s new data breach regulations go into effect on November 1, 2018. Despite announcing the effective date, Canada had not yet finalized these regulations. However, on April 18,…
Yahoo Settles Claims by SEC regarding 2014 Data Breach
Yesterday, the Securities and Exchange Commission (SEC) announced an important administrative settlement with Altaba (Yahoo) related to the company’s failure to disclose a major security breach to its users and investors. Under the terms of the settlement, the company agreed…
Cybersecurity Three Minute Check In Series: Does the GDPR Apply to a US Business?
In this episode of the Murtha Cullina Cybersecurity Three Minute Check In Series, Dena Castricone addresses whether businesses in the United States must comply with the General Data Protection Regulation (GDPR).
Uber Goes 0-2 in Data Breach Notifications
By Brad Davis*
In August, 2017, the Federal Trade Commission (“FTC”) proposed a settlement agreement with Uber stemming from its investigation of a 2014 data breach due to Uber’s “unreasonable security practices”. The lengthy investigation found that Uber’s employees were accessing customer’s personal…