Topic
Data Breach Notification
699 published works
Bright Law Blog
ASIC proposal for breach reporting relief
ASIC has announced it is consulting on a proposal to provide additional relief under the Corporations Act and National Credit Act reportable situations regime. Background. ASIC is proposing relief from…
Data Protection Report
New York changes data breach law—in December and February
By Annmarie Giblin (US), Susan Ross (US), Gerar Mazarakis (US), Phillip Pang (US)
New York just finished a series of adjustments to its data breach notification requirements. Effective immediately, organizations must notify impacted individuals of a data breach within 30 days of its…
Privacy Matters
Thailand: PDPC’s Clarification on Personal Data Breach Notification
By Chutikarn Boonnark, Samata Masagee
Since the full implementation of Thailand's Personal Data Protection Act (PDPA) in June 2022, the Personal Data Protection Committee (PDPC) has been instrumental in shaping the nation's data protection framework.…
RopesDataPhiles
New Year, New Data Breach Notification Requirements in New York: Impactful Changes for Life Sciences and Consumer Health Care Companies
By Christine Moundas, Gideon Zvi Palte, Elana Bengualid Harary, Julie Kvedar
In December 2024, New York Governor Kathy Hochul signed into law two bills (A8872A and S2376B; collectively, the “Bills”) that amend New York’s Data Breach Notification Law.1 The Bills introduce a maximum thirty-day…
Ogletree Deakins Insights
New York Amends Data Breach Notification Law to Enhance Notification Requirements, Expand Definition of ‘Private Information’
By By: Benjamin W. Perry, Jeffrey D. Coren, Publisher, Yomaris Sanchez-Orona
Quick Hits Businesses must now notify New York residents impacted by a data breach within thirty days after a data breach has been discovered. The state’s Department of Financial Services…
Workplace Privacy, Data Management & Security Report
New York Enacts Immediate Updates to Breach Notification Law
Governor Kathy Hochul signed several bills last month designed to strengthen protections for the personal data of consumers. One of those bills (S2659B) makes important changes to the notification timing…
RopesDataPhiles
Making a List and Checking it Twice: Navigating State Privacy and Security Regulations This Year
While there are many significant federal laws and regulations related to cybersecurity, states have led the way in regulating this area on a general, sector-agnostic basis, with the most notable…
Bright Law Blog
ASIC breach reportable situations regime update
ASIC has published Report 800 Insights from the reportable situations regime: July 2023 to June 2024. The publication provides high-level insights into breach reporting trends in reports lodged by financial…
Ogletree Deakins Insights
Human Resources’ Role in Data Privacy and Cybersecurity, Part IV: Communicating Effectively With Employees After a Data Breach
By By: Erin Schachter, Mercedes M. De La Rosa
Quick Hits Key steps for HR in managing a data breach incident include clarifying its role within the organization, coordinating with the privacy officer, and preparing to respond to employee…
Bright Law Blog
ASIC consolidates and extends reportable situations relief
ASIC has consolidated the two breach reporting instruments in ASIC Corporations and Credit (Breach Reporting – Reportable Situations) Instrument 2021/716 and ASIC Credit (Breach Reporting – Prescribed Commonwealth Legislation) Instrument…