In late October 2024, Ohio Senate Bill 29 (“SB 29”)[1] took effect. This new law regulates educational records and student data privacy throughout the state, specifically relating to student-issued devices (e.g., laptops, tablets, software). What makes SB 29 unique
Latest from Taft Privacy & Data Security Insights - Page 8
New Year Rings in New State Privacy Laws
A new year means new effective dates for state privacy legislation. On January 1, 2025, four states witnessed consumer privacy protection laws take effect: Delaware, Iowa, Nebraska, and New Hampshire.
These four states join another 16 that have comprehensive data
Video Privacy Protection Act Claims – Maybe Not a Slam Dunk After All
With Cyber Monday 2024 in the rear-view mirror, we are looking at one of the hot topics in data-privacy and cybersecurity litigation: the Video Privacy Protection Act.
Recent years have seen an uptick in lawsuits asserting violations of the VPPA
Whatcha Watching? The CFPB’s Recent Guidance on Employer Monitoring
With the rise in remote work, not to mention better technology, many employers have begun using apps and other services to monitor employees’ activities to track, assess, and evaluate workers. The Consumer Financial Protection Bureau (CFPB) recently issued a Circular
Top 10 Technology Issues to Watch for in 2025
Hard to believe, but 2025 will be here before you know it. And what goes best with a new year? A countdown list!
Last week, I spoke at the Dayton Bar Association’s Corporate Counsel Section on the topic of the
Health Data and its Many Obligations – An Overview of the Expanding Scope of Health Data Laws in the United States
Last week, Taft’s Privacy and Data Security team sponsored and presented at Northern Kentucky University’s (NKU) 17th Annual Cybersecurity Symposium. Our presentation centered on (i) new consumer health data laws being enacted at the state level across the country;
Another Update Already? New EU Standard Contractual Clauses on the Horizon to Further Safeguard Cross Border Data Transfers
Three years after the European Commission’s (Commission) adoption of the updated Standard Contractual Clauses (SCCs), new clauses are on the horizon.
The Commission announced a recent initiative in which the SCCs would be open for public consultation beginning the fourth
Is It Still CMMC 2.0? DoD Clarifies the Forthcoming Cybersecurity Standard
On Aug. 15, the DoD issued another proposed rule regarding the forthcoming Cybersecurity Maturity Model Certification (CMMC) standard. As part of the release, the DoD proposed some additional verbiage for the DFARS regarding future cybersecurity obligations and offered clarifications of
Ready for Work: The Swiss Federal Council Approves of the Swiss-U.S. DPF
Earlier this month, the Swiss Federal Council approved the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF). Beginning September 15, 2024, companies may rely on the Swiss-U.S. DPF as a lawful basis to transfer personal data of Swiss residents to companies in
New Legislation Promises Stronger Privacy Protections and Clearer Guidelines for Businesses
On Aug. 2, 2024, Illinois Governor J.B. Pritzker signed SB 2979 into law, bringing significant reform to the state’s Biometric Information Privacy Act (BIPA). The much-anticipated BIPA amendment took effect immediately and will provide welcome relief to businesses.
The amendment