Rapidly-shifting regulatory requirements affecting data privacy often leave businesses struggling not only to keep up with immediate compliance needs, but also wondering how they can “future proof” their businesses to account for increasingly robust laws. And as the technology around artificial intelligence increases in sophistication and ubiquity, lawmakers and consumers are taking notice and action. How should businesses be thinking about these changes beyond mere compliance? What are the ethical implications around data use affecting…

January 28 is Data Privacy Day, and on this 14th annual Data Privacy Day, I find myself reflecting on the question of data ethics. Far from being an academic concept, “data ethics” presents a model for data management with real practical implications for organizations.  (I should note that I am focused here on personal data.)  To understand what the concept might entail, let’s take a step back and talk about two other models for data…

Editors’ Note:  This is the fourth in our fifth-annual end-of-year series examining important trends in data privacy and cybersecurity in the coming year.  Read our previous posts on Energy, Cannabis, and the GDPR. As the Trump Administration ends, it is time to look forward to what may be on the horizon with regards to law enforcement at the FTC under the Biden Administration. At this point the future is a bit hazy. It is…

You may have forgotten that there is a federal criminal identity theft statute, 18 U.S.C. § 1028A, which says: Whoever, during and in relation to any felony violation enumerated in subsection (c), knowingly transfers, possesses, or uses, without lawful authority, a means of identification of another person shall, in addition to the punishment provided for such felony, be sentenced to a term of imprisonment of 2 years. Section 1028A is not frequently invoked, but it…

Editors’ Note:  This is the third in our fifth-annual end-of-year series examining important trends in data privacy and cybersecurity in the coming year.  Read our previous post on Energy and Cannabis. A year ago, transferring data from Europe to the United States was inconvenient but manageable. Thousands of companies participated in the Privacy Shield, an agreement between the United States Department of Commerce and the European Commission where data importers certified that protected Europeans’ data…

Editors’ Note:  This is the second in our fifth-annual end-of-year series examining important trends in data privacy and cybersecurity in the coming year.  Read our previous post on Energy. Though the final results of the 2020 presidential race took a few days to become clear, it was obvious by the morning of November 4 that cannabis legalization had run the table: from deep red Montana, South Dakota, and Mississippi, to purple Arizona, and blue…

The First Circuit’s recent opinion in Project Veritas Action Fund v. Rollins, upheld a challenge to the Massachusetts anti-wiretap law, Mass. Gen. Laws ch. 272, § 99, carving out an exception for certain activity protected by the First Amendment.   The opinion begins: Massachusetts, like other states concerned about the threat to privacy that commercially available electronic eavesdropping devices pose, makes it a crime to record another person’s words secretly and without consent.…