Topic
Data Breach Notification
699 published works
Perkins on Privacy
FTC Expands Health Breach Notification Rule
By Janis Kestenbaum, Erin K. Earl, Charlotte Kress
The Federal Trade Commission (FTC) announced on April 26, 2024, that a final rule modifying its Health Breach Notification Rule (HBNR) adopted on a 3-2 vote along party lines. The…
Media & Privacy Risk Report
SEC Joins Chorus of Regulators Requiring Data Breach Notifications
By Blaine C. Kimrey, Bryan K. Clark, Nusra Ismail
Last week, the U.S. Securities and Exchange Commission (“SEC”) became the latest federal regulator to implement a data breach notification law. The commissioners unanimously voted to approve amendments to Regulation…
Consumer Finance and Fintech Blog
Reminder: FTC Safeguards Rule Notification Requirement Now In Effect
By A.J. Dhaliwal, Mehul Madia, Maxwell Earp-Thomas
On May 13, the FTC’s amendment to the Safeguards Rule relating to the reporting of data breaches and security incidents, which were announced in October of 2023, became effective. As…
Workplace Privacy, Data Management & Security Report
Utah Updates to Breach Notification Requirements Take Effect
On May 1, 2024, amendments to Utah’s cybersecurity and data breach notification law took effect. The state’s cybersecurity and data breach notification law requires an organization that conducts business in…
Data Protection Report
The US government, privacy, and security – recent developments
By Susan Ross (US), Annmarie Giblin (US)
The United States Federal Government is turning its attention to privacy and cybersecurity laws, and the result has been several recent legal developments that may have an impact on your…
Eye On Privacy
Utah Breach Notice Law Amended, Effective May 1
By Liisa Thomas
Utah, among other privacy laws it has enacted or modified recently, has also modified its breach notification law. This follows last year’s changes to the law, which among other things…
Media & Privacy Risk Report
Breach Response: Is 72 hours the new 30 days?
By Bryan K. Clark, Blaine C. Kimrey
For years, we were able to tell most clients experiencing a potential data security incident that they likely had at least 30 days to notify any third parties about the…
Privacy & Information Security Law Blog
U.S. Cybersecurity and Infrastructure Agency Releases Proposed Rules on Breach Reporting Requirements
On March 27, 2024, the U.S. Cybersecurity and Infrastructure Agency released an unpublished Notice of Proposed Rulemaking ("NPRM") pursuant that would require covered entities to report (1) qualifying cyber incidents,…
Privacy & Information Security Law Blog
Utah Enacts Amendments to State Breach Notification Law
Utah Governor Spencer J. Cox signed another data-related bill into law, Senate Bill (SB) 98, Online Data Security and Privacy Amendments.
Rural Spectrum Scanner
Group Seeks 5th Circuit Review of New FCC Data Breach Rules
The Texas Association of Business (TAB) has petitioned the 5th U.S. Circuit of Appeals Court for review of the FCC’s recently updated data breach notification rules. The new rules will,…