Topic
Data Breach Notification
699 published works
Data Privacy Dish
Did the CPRA expand the scope of the private right of action?
Section 1798.150 of the CCPA permits consumers to “institute a civil action” if consumer “personal information, as defined in subparagraph (A) of paragraph (1) of subdivision (d) of Section 1798.81.5,…
Bright Law Blog
Breach reporting regulations
Treasury is consulting on the draft regulation amendments that will support the breach reporting rules in Schedule 11 of the Financial Sector Reform (Hayne Royal Commission Response) Act 2020 which…
Information Bytes
The Puzzle of State PII Breach Notification Statutes
By Peter Sloan
It's once again time for a summary round-up for the puzzling array of state PII breach notification laws. Back in 2002, California enacted the first state law mandating notification of…
Privacy & Information Security Law Blog
CIPL Submits Response to the EDPB Guidelines on Examples Regarding Data Breach Notification
The Centre for Information Policy Leadership at Hunton Andrews Kurth has submitted its response to the European Data Protection Board consultation on draft guidelines on examples regarding data breach notification.…
Data Privacy Dish
Does a company need to report a lost or stolen laptop under the GDPR?
Possibly. The European Data Protection Board (EDPB) issued draft practical guidance on various types of data breaches to assist companies with identifying situations in which a data security incident may…
ComplexDiscovery
Luck of the Irish? Data Protection Commission of Ireland Publishes Annual Report
By Rob Robinson
Editor’s Note: The Data Protection Commission (DPC) is the Irish supervisory authority for the General Data Protection Regulation (GDPR). It also has functions and powers related to other critical regulatory…
Data Privacy Dish
Does inadvertent disclosure of personal data require notification under the GDPR?
Maybe not. The European Data Protection Board (EDPB) issued draft practical guidance on various types of data breaches to assist companies with identifying situations in which a data security incident…
Perkins on Privacy
California Judge Dismisses CCPA Claim in Absence of Alleged Security Breach
On February 2, 2021, a California magistrate judge dismissed claims against a defendant tech company based on alleged violations of the California Consumer Privacy Act (CCPA) because the plaintiff admittedly…
The Data Advisor
EDPB Publishes New Guidance for Data Breach Notification
By Laura De Boel, Cédric Burton, Christopher Foo, Maximin Orsero
On January 18, 2021, the European Data Protection Board (EDPB), comprised of all national supervisory authorities (SAs) of the European Union, published draft guidelines for data breach notification1 (the Guidelines). The Guidelines…
Data Privacy Dish
The EU Data Protection Board Issues Practical Guidance on Data Breach Reporting
When the GDPR took effect in 2018, it required notification within 72 hours to supervisory authorities in the EU of a data breach likely to result in a risk to…