Topic
Data Breach Notification
699 published works
Bright Law Blog
Case note: penalty for failing to report breach
In Australian Securities and Investments Commission v Statewide Superannuation Pty Ltd [2021] FCA 1650 in addition to penalties totalling $3,500,000 in respect of Statewide’s contraventions of sections 12DB(1)(g) and (i)…
Iowa Cybersecurity Law Blog
Data Breach! Time to Tell the Regulators.
By John Lande
For many years, the primary concern of victims of cybersecurity events was mitigating the damage fraudsters caused in the attack. More recently, federal agencies are imposing more legal compliance obligations…
Data Privacy + Cybersecurity Insider
If Your Disclosure of a Data Breach Was “Late,” You May Have to Litigate
By Jean Tomasco
A professional accounting firm in Illinois received an unwanted holiday “gift” in the form of a class action complaint stemming from its alleged failure to secure personally identifiable information (PII)…
Data Protection Report
US banking regulators promulgate a final rule for 36-hour notice of breach
By David Kessler (US), David Kitchen (US), Tim Byrne (US), Susan Ross (US)
On November 18, 2021, the US federal banking regulators Office of the Comptroller of the Currency, Federal Reserve Board and Federal Deposit Insurance Corporation jointly announced a final rule that will require banking…
RopesDataPhiles
FTC Updates Safeguards Rule To Specify Security Requirements
On October 27, 2021, the FTC updated its financial services cybersecurity Safeguards Rule and made other revisions to its associated privacy rule. The FTC also issued a request for comment…
Global Regulation Tomorrow
Financial Services monthly wrap-up September 2021
By Diane Dalfonso, Jon Ireland, Ray Giblett (AU), Timothy Chan (AU), Alex Madry, Laura Taylor, Merren Taylor, Daniel Corban
September continued to be a busy month in the funds, super and insurance sectors, as the industry is in the final stages of preparing for the anticipated breach-reporting, anti-hawking reforms…
Workplace Privacy, Data Management & Security Report
California Expands Privacy and Security Requirements for Genetic Data
By Joseph J. Lazzarotti, Jason C. Gavejian, Maya Atrakchi
With health-related data and how to protect it at the forefront of discussion since the start of the COVID-19 pandemic, this week California Governor Gavin Newsom signed into law two…
Eye On Privacy
NYDFS FAQ Provides Clarity on Breach Notification and Security Requirements
By Julia Kadish, Harrison Schafer
The New York Department of Financial Service recently clarified security incident notification requirements and the use of multi-factor authentication. On its FAQ page, the NYDFS added two new questions and…
HIPAA & Health Information Technology
HIPAA or Not, Health Apps Must Provide Breach Notification
The Federal Trade Commission seems to be getting serious about unauthorized disclosures of data collected by health apps. In a Policy Statement issued on September 15, 2021, the FTC says…
Perkins on Privacy
2021 Breach Notification Law Update: Connecticut and Texas Expand Requirements, Ransomware and Supply Chain Attacks Take Spotlight
By Amelia M. Gerlicher, Perkins Coie
Cyberattacks continue to make the news and affect our lives in increasingly more significant ways. However, after several years in which states have actively updated breach notification laws in reaction…