Topic
Data Breach Notification
699 published works
Rural Spectrum Scanner
Sixth Circuit Upholds FCC Data Breach Notification Rules
The Sixth Circuit U.S. Court of Appeals has upheld the FCC’s data breach notification rules, adopted in 2024, in the face of challenges from the Ohio Telecom Association, the Texas…
Bright Law Blog
ASIC Breach reporting relief
ASIC has published ASIC Corporations and Credit (Amendment) Instrument 2025/289 which gives further relief for Australian financial services and credit licensees under the reportable situations regime in addition to previous…
The Consumer Financial Services Blog
Oklahoma Amends its Security Breach Notification Act
Oklahoma Senate Bill 626, which amends Oklahoma’s Security Breach Notification Act, recently became law without the Governor’s signature. The legislation will go into effect Jan. 1, 2026. The amendments include...…
Workplace Privacy, Data Management & Security Report
Oklahoma Expands its Security Breach Notification Law
The Oklahoma State Legislature recently enacted Senate Bill 626, amending its Security Breach Notification Act, effective January 1, 2026, to address gaps in the state’s current cybersecurity framework (the “Amendment”).…
China Law Insight
数据泄露通知制度与合规要义
By King & Wood
作者：宁宣凤 吴涵 方禹 数据安全核心的两个风险是数据滥用和数据泄露。对于数据滥用问题，可以通过严格的法律规则来保证规范的数据处理，从而防范数据滥用。但是，数据泄露却并非可以完全避免，它不仅是内部风险，也经常因为外部攻击而发生数据泄露。数据泄露一直都是数据治理领域的长盛不衰的新闻话题，像是悬于企业头顶的达摩克利斯之剑。我国早在2012年，就对数据泄露问题作出了法律规定，《网络安全法》《数据安全法》《个人信息保护法》《网络数据安全管理条例》等重要法律法规中均涉及数据泄露问题，今年再次公开征求意见的《网络安全法（修改再次征求意见稿）》中也拟对大量数据泄露的情形规定严格的法律责任。然而，数据泄露从未停止，反而总能成为头条新闻，在各类统计盘点中不断翻新记录，加剧数据焦虑但又难以杜绝。 阅读更多
China Law Insight
Data Breach Notification System and Compliance Essentials
By King & Wood
Authored by: Ning Xuanfeng (Susan) , Wu Han and Gao Tongyue Data misuse and data breaches are the two core risks of data security. Data misuse can be prevented through…
Inside Privacy
South Africa Introduces Mandatory e-Portal Reporting for Data Breaches
By Dan Cooper, Benjamin Haley, Deon Govender, Ahmed Mokdad, Mosa Mkhize
On April 7, 2025, South Africa’s Information Regulator announced a new requirement for organizations to report data breaches—referred to under local law as “security compromises”—via an online eServices Portal. The announcement marks a…
Cov Africa
South Africa Introduces Mandatory e-Portal Reporting for Data Breaches
By Dan Cooper, Benjamin Haley, Deon Govender, Ahmed Mokdad, Mosa Mkhize
On April 7, 2025, South Africa’s Information Regulator announced a new requirement for organizations to report data breaches—referred to under local law as “security compromises”—via an online eServices Portal. The…
Bright Law Blog
Reportable breach situations: Findings of ASIC’s review
ASIC has published the results of its review of the compliance arrangements of 14 licensees of different sectors and sizes who had low numbers of reportable breach situations, or had…
Byte Back
New York Amends its Data Breach Notification Law
By Erik Dullea, Former Attorney Matti Mortimore, Maddie Kincaid
Keypoint: New York has amended its data breach notification law twice in the last 60 days to (1) add a 30-day deadline for notifying affected residents, (2) clarify that covered financial…