Topic
Data Breach Notification
699 published works
RopesDataPhiles
New York State Adopts New Cybersecurity Program and Incident Reporting Requirements for Hospitals
By Christine Moundas, Gideon Zvi Palte, William Shefelman
On October 2, 2024, the New York State Department of Health (“NYSDOH”) finalized and adopted new hospital cybersecurity regulations. Effective immediately, hospitals in New York State are required to report…
eDiscovery Today Blog
2024 Cost of a Data Breach Report by IBM: Cybersecurity Trends
By Doug Austin
One of the most interesting cyber reports every year comes from IBM, and their 2024 Cost of a Data Breach Report has good news and bad news. The post 2024…
Consumer Financial Services Law Monitor
Restrictions on Paying a Ransom Demand
Dear Mary, Which states now have statutory laws prohibiting payment of ransom following a data security breach? Are there others working on such legislation, to your knowledge? – Dick Clarke…
Eye On Privacy
Indiana Amends Breach Notification Law Along with New Adult Website Verification Requirement
By Liisa Thomas, Tracy Chau, Kathryn Smith
Indiana recently amended its breach notification law to include as personal information age verification information collected by adult websites. At the same time, the state passed a new law for…
Eye On Privacy
Keystone State Tweaks its Data Breach Notification Law Again
By Liisa Thomas, Tracy Chau, Kathryn Smith
In what may become an annual tradition, Pennsylvania has amended its breach notification law. The new provisions will take effect on September 26, 2024. As a reminder, Pennsylvania changed its…
Consumer Finance and Fintech Blog
Pennsylvania Amends Data Protection Requirements with Revised Breach Notification Act
By A.J. Dhaliwal, Mehul Madia, Skylar Stoudt
On June 28, Pennsylvania took a significant step to enhance its data protection framework by updating the Breach of Personal Information Notification Act through the enactment of SB 824. This…
Consumer Financial Services Law Monitor
Understanding Breach Notification Obligations Under California Law: What Does the CCPA Require?
Dear Mary, I am the privacy compliance officer at a cloud-based software company. We recently experienced an incident where, although none of our client's data was compromised, it appears that…
Data Privacy + Cybersecurity Insider
Rhode Island’s New Data Privacy Law
Some writers (not from my great state of Rhode Island) act like Rhode Island has been behind the times when it comes to data privacy and security when discussing the…
Tech Law Blog
Decoding the Data Protection Commission’s 2023 Annual Report – Part 1: Data Breaches
The Irish Data Protection Commission (DPC) released its 148-page annual report on 29 May 2024 (the Annual Report), highlighting the scope of work and enforcement activities undertaken by the DPC…
Consumer Financial Services Law Monitor
Can Vendors Notify Affected Individuals on Behalf of Businesses After a Data Breach?
Dear Mary, We were recently impacted by a vendor incident, and the vendor is offering to provide notice to the impacted individuals on our behalf. That sounds like great news…