Topic
Data Breach Notification
699 published works
Rural Spectrum Scanner
September Deadline Set for Delayed Cyber Incident Reporting Rules
The Cybersecurity and Infrastructure Security Agency (CISA) set a new deadline of September to publish long-delayed rules to implement a cyber incident reporting law. Rules to implement the 2022 Cyber…
Workplace Privacy, Data Management & Security Report
Proposed State Laws For Breach Notification Could Reshape Incident Response Plans
State breach-notification laws continue to evolve, and legislatures are using 2026 sessions to tighten consumer protections and shift the civil liability landscape that often follows a cyber event. For businesses,…
Inside Privacy
Connecticut Attorney General Releases 2025 CTDPA Enforcement Report
By Libbie Canter, Lindsey Tonsager, Jayne Ponder, Rosie Moss
The Connecticut Office of the Attorney General (“OAG”) issued an updated Enforcement Report (“Enforcement Report”) under the Connecticut Data Privacy Act (“CTDPA”). The Enforcement Report discusses the OAG’s enforcement actions…
Legal Health Information Exchange
Time is Up! OCR Complaint Intake & Breach Reporting Go Live for 42 CFR Part 2
Time is up, and the enforcement infrastructure is now live. OCR’s complaint portal is open to 42 CFR Part 2, and Part 2 breach reporting is no longer a future…
ComplexDiscovery
EDPB and EDPS Weigh In on the Digital Omnibus: Personal Data, Breach Reporting, and AI Governance
By Rob Robinson
Editor’s Note: Europe’s “Digital Omnibus” signals a shift in how compliance may be operationalized—reducing some external process requirements while increasing the need for internal, evidence-ready governance. In their Joint Opinion…
Blog of Digital Law and New Technologies
Guidelines from the Spanish Data Protection Agency on security breaches
By LetsLaw
The Spanish Data Protection Agency (AEPD) has strengthened its guidance in recent years on how companies should act in the event of a security breach affecting personal data. Through its…
Actionstep Blog
The Cost of a Security Breach Beyond the Headlines: What Law Firms Often Overlook
By Andrea Prien
Imagine this scenario: A midsize firm discovers a compromise through an employee’s credentials. While teams investigate and leadership prepares a statement to their customers, clients begin calling for reassurance or to initiate transfers. Internally, workflows…
Connect on Tech
US: Wrapping Up California’s Busy Privacy and Cybersecurity Legislative Year – How to Prepare for 2026
By Avi Toltzis, Cynthia Cole, Justine Phillips, Jonathan Tam, Lothar Determann, Helena Engfeldt
As has often been the case in recent years, California enacted a bevy of new data privacy and AI bills into law in 2025. This note reviews the highlights of…
Privacy + Cyber + AI
Oklahoma Amends Data Breach Notification Statute
By Karla Ballesteros, Sadia Mirza
Key point: Oklahoma recently updated its breach notification statute for the first time since enactment, aligning with broader state trends and underscoring the ongoing, continuous review of data breach notification…
Data Protection Report
California tightens data breach notification timelines, imposes 30-day notice requirement
By Annmarie Giblin (US), Susana Medeiros (US)
California recently signed into law Senate Bill No. 446, which amends its data breach notification law, Section 1798.82 of the Civil Code, to require covered companies to notify affected California…