News & Analysis as of

Dear Lawmakers, Your New Breach Notice Laws Should Address These Issues

The days of companies being so afraid of the reputational impact of a breach that they would look for any way possible to avoid disclosure are gone. The pendulum has swung in the opposite direction. Now companies, often in...more

President Obama Proposes Legislation Requiring Businesses to Notify Customers of Data Security Breaches Within 30 Days

In a speech given before the Federal Trade Commission (FTC) on Monday, January 12, President Obama proposed federal legislation that would impose a nationwide standard on companies that experience a data security breach. The...more

State Data Breach Notification Laws

The general definition of “personal information” or “PI” used in the majority of statutes is: An individual’s first name or first initial and last name plus one or more of following data elements: (i) Social Security number,...more

Data Breach Plaintiffs Survive Dismissal Against Target

Target’s 2013 data breach has generated over 100 consumer lawsuits, which were consolidated last year before the U.S. District Court for the District of Minnesota. On December 18, 2014, Judge Paul A. Magnuson issued a...more

California Data Breaches Require Identity Protection Services

California has long set the standard for protection of its residents’ personal information. California’s constitution explicitly recognizes a right to individual privacy and California’s legislature has been on the forefront...more

Happy New Year! 2015 Brings More Reasonable Breach Notification Reporting Periods for CA Health Care Providers

In 2008 California put into effect breach reporting laws applicable to certain licensed health care providers Healthcare Entities that are more stringent than HIPAA - so stringent that Healthcare Entities have been required...more

New California Privacy Laws

California continues to lead the way in passing new or updating existing data protection legislation. The weekly disclosure of new data breaches that involve retail and other corporations has focused the general public...more

On the Fifth Day of Privacy, California (and Delaware) gave to me

sing it with me now…. Five Golden Rules…….(well, five new privacy laws/requirements) There are five significant new privacy laws/amendments that will be effective as of New Year’s Day — January 1, 2015 — and...more

FCC Accepting Comments on ABA Petition to Exempt Data Breach Notification Requirements from the TCPA

On November 6, 2014, the Federal Communications Commission (“FCC”) issued a Public Notice requesting comments on a petition by the American Bankers Association (“ABA”) to exempt informational calls and texts to mobile devices...more

Cybersecurity Policy in the Lame Duck and Beyond

There are two categories of cybersecurity legislation awaiting Congressional consideration during the lame duck. First, there are a number of non-controversial, narrowly focused bills that are likely to be adopted as part of...more

FCC Proposes $10M Privacy Breach Fine Against Two Telecommunications Companies

On October 24, 2014, the Federal Communications Commission (“FCC”) announced that it intends to fine two telecommunications companies $10 million for storing confidential personal information of up to 305,000 customers in a...more

Data Breaches: Industry Calls for Single, Federal Breach Notification Standard

Yesterday, a coalition of 44 service and retail industry trade associations sent a letter to congressional leadership, urging the House and Senate to adopt a single data breach notification standard at the federal level. The...more

Is Your Business Too Small To Worry About A Data Breach?

No, not likely. In fact, even “mom and pop stores” have incurred hefty civil penalties for failing to notify consumers and/or regulators of a data breach....more

New California Privacy Law AB 1710: Data Security Requirements Just Got Broader

California has been a pioneer in enacting legislation designed to protect privacy. AB 1710, which was signed into law on September 30, 2014 by Governor Brown, is the latest example. It extends liability to businesses that...more

Advertising Law - October 2014 #2

Hashtags and Ads: Top 10 Legal Considerations for Brands Involved in Digital and Social Media Advertising - Advertising, marketing and promotions, both via digital and traditional channels, are governed in the United...more

Federal Bills Pursue Comprehensive Data Breach Notification

The recent string of wide-scale data breach disclosures by major retailers has led to a growing call for federal legislation to protect consumer information and establish uniform data breach notification...more

Good News: California Extends Its Medical Data Breach Notification Requirement From 5 to 15 Days

On Sept. 18, 2014, California’s governor approved Assembly Bill 1755, extending California’s stringent breach notification deadline for medical information breaches from five business days to 15 business days for clinics,...more

Quirky Question #243 – More on Breach Notification Laws

Quirky Question: Can you tell me what has been happening in California regarding breach notification laws? Answer: Continuing the trend of changes in state breach notification and related laws, Cal. A.B....more

Breaking Old Ground: California Again Amends Breach Law

Not to be outdone by Florida, California has yet again amended its breach law and again in groundbreaking (yet confusing) fashion. On September 30, 2014, California Governor Brown signed into law a bill (“AB 1710”) that...more

California Updates State Breach Notification Law, Expands Security Procedures to Entities that “Maintain” Personal Information

On September 30, 2014, California took further steps to protect the personal information of its residents by amending several sections of its breach notification and information security laws (Cal. Civ. Code §§ 1798.81.5,...more

California Extends Deadline for Reporting Breaches to the CDPH from 5 to 15 Business Days

On September 18, 2014, California Governor, Jerry Brown, signed Assembly Bill 1755 (“AB1755”) into law, amending breach notification provisions in the California Health and Safety Code applicable to licensed clinics, health...more

California Data Breaches Require Identity Protection Services (and More)

On September 30, 2014, Gov. Edmund G. Brown signed AB 1710 into law, amending existing law to impose even stricter regulation on businesses with access to personal information about California residents. California has long...more

California Privacy Laws Change: Identity Theft Prevention and Mitigation Services

Continuing the trend of changes in state breach notification and related laws, Cal. A.B. 1710 amends California's breach notification, security procedures, and Social Security number (SSN) laws in the wake of significant data...more

IP|Trend: Dust up After the Breach [Video]

Data breaches have accelerated rapidly in the past several years, and after a breach litigation is sure to follow. Attorney Sam Walling sits down with Seth Northrop to discuss the types of claims that a company that...more

California’s Latest Amendments to Its Data Security Breach Notification Law – Much Ado about Nothing?

On September 30, 2014, California Governor, Jerry Brown, signed Assembly Bill 1710 into law, amending California’s existing personal information privacy laws. A.B. 1710 makes several changes to existing laws including...more

104 Results
|
View per page
Page: of 5