Topic
Data Breach Notification
699 published works
Bright Law Blog
ASIC Breach Reportable Situations dashboard
ASIC has released its Breach Reportable Situations dashboard containing data about reported breaches of the law by Australian financial services licensees and credit licensees. The Reportable Situations dashboard contains information…
Banking, Finance and Securities
ASIC launches new breach data dashboard
By Lucinda McCann, Liz Hastilow
On 31 October 2025, the Australian Securities and Investments Commission (ASIC) announced a new public Reportable Situations dashboard which contains information about licensees’ self-reported breaches. The dashboard, which is intended…
Eye On Privacy
2026 Data Breach Law Updates – California and Oklahoma
By Kathryn Smith, Julia Kadish
California recently passed an amendment accelerating how quickly businesses must notify following a data breach. Previously, the requirement was to notify affected individuals “without unreasonable delay.” Beginning January 1, 2026,…
Consumer Finance and Fintech Blog
California Enacts 30-Day Data Breach Notification Deadline
By A.J. Dhaliwal, Mehul Madia, Maxwell Earp-Thomas
On October 3, California Governor Gavin Newsom signed Senate Bill 446, which strengthens California’s existing data-breach disclosure requirements. The law requires businesses and individuals that conduct business in the state to…
Workplace Privacy, Data Management & Security Report
California Sets 30 Day Deadline for Data Breach Notifications
Governor Gavin Newsom recently signed SB 446 into law, introducing significant changes to California’s data breach notification requirements. The bill establishes deadlines for notifying consumers and the state’s Attorney General…
Privacy + Cyber + AI
Peabody Settlement Reaffirms Massachusetts AG’s Commitment to Protecting Consumer Personal Information
By Bianca Nalaschi, Sadia Mirza
Key point: Regulators will ensure corporate accountability by imposing stringent sanctions on businesses that are perceived as neglecting the protection of consumer personal information. Recently, Massachusetts Attorney General (AG) Andrea…
Privacy Matters
CHINA: new stricter and 4-hour data breach reporting requirements for certain incidents
The Cyberspace Administration of China ("CAC") has recently published the Administrative Measures for Network Security Incident Reporting ("Measures"), which provide further guidance on when and how to report network security…
Insurance Law Hawaii
Insured’s Claims against Insurer under Cyber Policy Survive Motion to Dismiss
The federal district court denied the insurer's motion to dismiss the insured's claims under a Commercial Cyber Policy, but granted the motion to dismiss the producer of the…
Legal Health Information Exchange
Beware! New Breach Reporting Obligations Under 42 CFR Part 2 — Even When HIPAA Wouldn’t Require It
Starting February 16, 2026, Part 2 programs and providers will be required to report unauthorized disclosures of Part 2 information – specifically, any “acquisition, access, use, or disclosure” that violates…
Consumer Finance and Fintech Blog
Massachusetts AG Secures $795,000 Settlement for Alleged Data Security and Breach Notification Failures
By A.J. Dhaliwal, Mehul Madia, Maxwell Earp-Thomas
On August 19, Massachusetts Attorney General Andrea Joy Campbell announced a $795,000 settlement with a property management company for alleged violations of the Massachusetts Consumer Protection Act, and the Massachusetts…