Topic
Data Breach Notification
699 published works
Privacy & Information Security Law Blog
Mandatory Data Breach Notification Bill Proposed in Australia
On May 29, 2013, a bill, accompanied by an explanatory memorandum, was proposed in the Australian Parliament that requires businesses and government agencies that experience a serious data breach to…
Privacy & Information Security Law Blog
Costa Rica Imposes Five-Day Breach Notification Obligation and Other Stringent Data Protection Requirement
On March 5, 2013, Costa Rica published wide-ranging data protection regulations that expand and clarify many aspects of the underlying law. The regulations, which took effect immediately, include a “right…
InsureReinsure
HHS Broadens Notification Obligations in Final Data Breach Notification Rule
By David Szabo, Theodore Augustinos, Troutman Pepper Locke
As we reported here, the U.S. Department of Health and Human Services (“HHS”) recently issued final regulations (the “Final Rule”) implementing changes to HIPAA mandated by the HITECH Act. The…
Technology Law Dispatch
European Commission may propose Directive requiring disclosure of security breaches
By Christine Nielsen Czuprynski
This post was written by Cynthia O'Donoghue. The European Commission has proposed a “digital to-do list” which sets out seven new priorities for the digital economy and society. Included in…
New York Health Law
New Breach Notification Requirements Released
The US Department of Health and Human Services ("HHS") Office for Civil Rights (“OCR”) released final rules on January 17, 2013 governing the privacy and security of protected health information under…
InsureReinsure
New HIPAA Regulations Released
By David Szabo, Theodore Augustinos, Troutman Pepper Locke
On January 17, 2013, the U.S. Department of Health and Human Services released final regulations implementing changes to HIPAA mandated by the HITECH Act, as well as updated regulations under…
HIPAA & Health Information Technology
A Reader’s Comment about a Third Potential Posting on the HHS Breach Parade for Massachusetts Eye and Ear Infirmary
A thoughtful reader commented on a recent blog post in this series by highlighting the importance of evaluating the risk of harm by any covered entity that experiences a PHI…
Inside Privacy
Australian Government Launches Discussion Paper on Privacy Breach Notification
By Fredericka Argent This month, following an inquiry by the Australian Law Reform Commission (“ALRC”) into the effectiveness of the Australian Privacy Act 1988, the Australian government launched a discussion…
The Securities Edge
Cybersecurity issues continue to draw attention
Cybersecurity issues continue to be a hot topic for companies. As discussed in my prior blog posts, “Get ready for increased cybersecurity disclosure requirements” and “SEC pushes for disclosure of…
Ad Law Access
Connecticut Data Breach Law Will Require Notice to Attorney General
By Kelley Drye
Beginning October 1, 2012, Connecticut’s data breach notification law will require businesses to notify the Office of the Attorney General of a security breach affecting Connecticut residents. The current law…