Personally Identifiable Information

News & Analysis as of

California Court Raises Anew Questions of Standing in Data Breach Cases

There is no question that data breaches are among the most common and costly threats to consumers and companies alike. What remains the subject of vehement debate is whether plaintiffs in cyber-attack cases must allege stolen...more

Data protection obligations on banks into force in Italy

The Italian Data Protection Authority issued regulations introducing new relevant data protection obligations for banks in the processing of customers’ personal data by their employees aimed at monitoring the transfer of...more

Medical Information More Valuable to Hackers Than Credit Card Numbers

In light of the recently reported large healthcare data breaches that have resulted in the potential theft of the personal information of millions of patients, the FBI warned healthcare providers yet again of the dangers of...more

New York Court Holds No Coverage for Publication of Credit Card Information

In its recent decision in Nat’l Fire Ins. Co. v. E. Mishan & Sons, Inc., 2014 U.S. Dist. LEXIS 130608 (S.D.N.Y. Sept. 16, 2014), the United States District Court for the Southern District of New York had occasion to consider...more

California District Court Finds Threat of Future Harm Sufficient to Confer Article III Standing in Data Breach Action

In a departure from the mounting body of case law finding that the “increased risk of future harm” is insufficient to confer Article III standing on victims of a data breach, the U.S. District Court for the Northern District...more

Alberta Privacy Law Update: PIPA on Death’s Door

About a year ago on November 15, 2013, Alberta’s Personal Information Protection Act (PIPA) was declared invalid on constitutional grounds. The Supreme Court of Canada (SCC), in its wisdom, deferred the effect of this order...more

Third Circuit Holds that Envelope Revealing Consumer’s Account Number Violates the FDCPA

The Third Circuit Court of Appeals recently held that an envelope revealing a consumer’s account number through a clear plastic window constitutes a violation of the Fair Debt Collection Practices Act (“FDCPA”). In doing so,...more

Making UK Employees Aware of the Perils of Pilfering Their Employers' Confidential Information

Employers need to appreciate and address the fact that employees who remove their employers’ confidential information often do not appear to appreciate the risks of being caught or the potentially very serious consequences of...more

California Continues to Lead with New Legislation Impacting Privacy and Security

At the end of September, California Governor Edmund G. Brown, Jr. approved six bills designed to enhance and expand California’s privacy laws. These new laws are scheduled to take effect in 2015 and 2016. It will be...more

Findings from ICO Visits to Credit Reference Agencies

On September 30, the UK Information Commissioner’s Office (ICO) published a review of the manner in which personal data is processed by credit reference agencies (CRAs). Although the report focuses on CRAs, the ICO...more

Good News: California Extends Its Medical Data Breach Notification Requirement From 5 to 15 Days

On Sept. 18, 2014, California’s governor approved Assembly Bill 1755, extending California’s stringent breach notification deadline for medical information breaches from five business days to 15 business days for clinics,...more

Breaking Old Ground: California Again Amends Breach Law

Not to be outdone by Florida, California has yet again amended its breach law and again in groundbreaking (yet confusing) fashion. On September 30, 2014, California Governor Brown signed into law a bill (“AB 1710”) that...more

California Updates State Breach Notification Law, Expands Security Procedures to Entities that “Maintain” Personal Information

On September 30, 2014, California took further steps to protect the personal information of its residents by amending several sections of its breach notification and information security laws (Cal. Civ. Code §§ 1798.81.5,...more

California Data Breaches Require Identity Protection Services (and More)

On September 30, 2014, Gov. Edmund G. Brown signed AB 1710 into law, amending existing law to impose even stricter regulation on businesses with access to personal information about California residents. California has long...more

Mobilizing on Mobile Apps: The FTC’s Comment to the CFPB Signals its Priorities

In recent months, the Federal Trade Commission (“FTC”) has been steadily ramping up its efforts to monitor, regulate, and provide best practice guidance in the rapidly expanding field of mobile applications. On September 10,...more

FINRA Requests Comment on a Rule Proposal to Implement the Comprehensive Automated Risk Data System

In December 2013, the Financial Industry Regulatory Authority, Inc. released a concept proposal seeking comments on an initiative to implement the Comprehensive Automated Risk Data System (CARDS), which would be designed to...more

California Passes New Law Protecting Consumers From Data Breaches

On September 30, 2014, Governor Jerry Brown signed Assembly Bill 1710, authored by Assembly Members Roger Dickinson (D-Sacramento) and Bob Wieckowski (D-Fremont). AB 1710 enhances consumer protections by strengthening the...more

More Kids' Privacy News: Calif. Passes Law on Student Privacy and Advertising (SOPIPA) and FTC on the Hunt

California Gov. Jerry Brown signed into law Monday, August 29, 2014, a law aimed at restricting the use of students' educational data by third-party vendors, making this one of the more restrictive and sweeping state privacy...more

California Passes New Data Breach Laws: Requirement to Offer Identity Theft Protection at No Cost, New Duties Imposed on...

California added new provisions to its data breach law on October 1 by signing Bill AB 1710 into law. The amendment to California’s Civil Code (1) requires entities that experience a data breach to provide identity theft...more

California Continues to Regulate Privacy and Advertising to Minors in New Law Regulating School-related Online Services

On September 29, 2014, California Governor Jerry Brown signed SB 1177 into law, effective Jan 1, 2015. The new privacy and advertising regulation goes beyond FERPA, the federal student privacy law, and existing state student...more

Bernstein Shur Business and Commercial Litigation Newsletter #44

We are pleased to present the 44th edition of the Bernstein Shur Business and Commercial Litigation Newsletter. This month, we highlight recent cases that address subpoena enforcement, a rejected class action settlement, and...more

Delaware Data Destruction Law Highlights the Necessity of Data Destruction Plans

The list of states requiring the disposal or destruction of personal data is growing, and companies need to respond accordingly by adopting data destruction plans. Delaware recently became the latest in a series of states to...more

Recent Changes to California Laws - the Healthcare Perspective

Workers’ Compensation Insurance for Professional Athletes - AB 1309; Labor Code §3600.5 - The efforts made by professional athletes seeking workers’ compensation benefits for injuries that they sustained on the...more

Breaking News: The COPPA Enforcement Actions Are Here!

As we predicted in prior blog posts, the Federal Trade Commission has begun its vigorous enforcement of the Amended COPPA Rule. And one of the players is not a child-related site, so read on. The Commission just announced ...more

Why Worry About a Little Skimmer?

Merchants—rightfully so—are worried about securing their payment card environments so that their name does not appear in a headline discussing how millions of cards were stolen from them. Faced with the challenge of...more

521 Results
|
View per page
Page: of 21