News & Analysis as of May 17, 2025

Personally Identifiable Information

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

Managing Data Security and Privacy Risks in Enterprise AI

Frost Brown Todd on 3/10/2025

Artificial intelligence (AI), particularly generative AI, thrives on vast amounts of data, fueling AI capabilities, insights, and predictions. But with this reliance on data comes potential privacy and security risks. And...more

FAQs for Schools and Persons Affected By the PowerSchool Data Breach

Jackson Lewis P.C. on 1/13/2025

A massive data breach hit one of the country’s largest education software providers. According to EducationWeek, PowerSchool provides school software products to more than 16,000 customers, largely K-12 schools, that serve 50...more

Privacy Briefs: November 2024

Health Care Compliance Association (HCCA) on 11/14/2024

Change Healthcare Inc. has amended its initial breach report to the HHS Office for Civil Rights (OCR) to state that 100 million individuals were impacted by its mammoth ransomware attack and breach. However, as of Oct. 24,...more

Pennsylvania Amends Data Breach Notification Law

Alston & Bird on 7/25/2024

Pennsylvania’s Governor recently approved amendments to the Commonwealth’s data breach notification law, which represent a significant overhaul to the law. As detailed below, the amended law makes a number of material...more

SEC Revamps and Enhances Data Protections with Amendments to Regulation S-P

Foley Hoag LLP - Security, Privacy and the... on 5/30/2024

The Securities and Exchange Commission (“SEC”) has announced the adoption of amendments to Regulation S-P (“Amendments”) to modernize and enhance the rules that govern the treatment of consumers’ nonpublic personal...more

United States Looks Towards its First Cross-Border Data Transfer Regime with New Executive Order

Benesch on 3/22/2024

President Biden issued an Executive Order last month calling on the DOJ and relevant government agencies to tighten regulations on bulk data transfers to “countries of concern.” In late February, President Biden issued...more

President Biden Issues Executive Order Empowering DOJ to Regulate the Export of Sensitive Personal Data

Mayer Brown on 3/6/2024

On February 28, 2024, President Joe Biden issued Executive Order (“EO”) 14117, empowering the Department of Justice (DOJ) to regulate the export of certain consumer data, in order to prevent certain countries’ governments...more

That’s a Wrap…or Not? Regulatory Data Incident Investigation Resolutions and the Path Forward

Troutman Pepper Locke on 2/19/2024

As we discussed in part three of this series, “Navigating the Complexities of Regulatory Data Incident Investigations,” when an organization is the subject of regulatory data incident investigations, it must navigate a...more

Privacy Breach: The Silent Killer of Startups

Pillsbury - Propel on 1/23/2024

A privacy breach can have detrimental consequences for startups: A privacy breach may trigger legal consequences and regulatory scrutiny, especially for a startup that operates in areas with stringent data protection laws...more

Indiana Amends Breach Notification Law to Require Notification Within 45 Days

Robinson+Cole Data Privacy + Security Insider on 3/25/2022

Indiana has amended its breach notification law to require entities to notify individuals “without unreasonable delay, but not more than forty-five (45) days after the discovery of the breach.” It clarifies that a delay is...more

Federal Banking Regulators Issue Rule Requiring 36 Hour Notice of Ransomware and Other Disruptive Cybersecurity Incidents

Polsinelli on 11/22/2021

On November 18, 2021, the Federal Deposit Insurance Corporation, the Board of Governors of the Federal Reserve System, and the Office of the Comptroller of the Currency issued a joint final rule to require banking...more

FTC Amends Financial Institution Safeguards Rule Including New Information Security Requirements

Benesch on 11/11/2021

The updated rule also includes new exemptions, expands the definition of “financial institution,” and creates new accountability requirements. On October 27th the Federal Trade Commission (“FTC”) adopted and published...more

Time for a Check-Up: Updates in Data Breach Notification and Reporting

Vinson & Elkins LLP on 10/15/2021

As the onslaught of data breaches and ransomware attacks continues, state governments are grappling with ways to bolster the impact and reach of breach notification laws. All fifty states, Puerto Rico, Guam, the Virgin...more

Privacy in the House? An Update on Florida's Data Privacy Statutes

Bilzin Sumberg on 4/16/2021

As the dueling Florida House and Senate consumer data privacy protection bills make their way through various committees in the Florida legislature, April 14, 2021, was the Florida House’s turn for a vote. House Bill 969...more

Frequently Asked Questions About the GDPR

Orrick, Herrington & Sutcliffe LLP on 4/13/2021

What is the General Data Protection Regulation (GDPR)? The GDPR is an EU law that was passed by parliament and went into effect on May 25, 2018. The GDPR unifies the EU under a single data protection regime for all member...more

New Colorado Privacy Act

Polsinelli on 4/7/2021

Like Virginia and Washington before it, on March 19, 2021, Colorado introduced a data privacy bill, the Colorado Privacy Act (CPA). As currently drafted, the CPA would be similar to other U.S. state privacy laws, including...more

How to Develop An Effective Data Retention Policy

Reveal on 10/9/2020

Every organization needs to develop an effective data retention policy to gain visibility and control over its information. But given the increasing complexity of today’s data systems and the constantly evolving regulatory...more

California Approves Final California Consumer Privacy Act Regulations

Akin Gump Strauss Hauer & Feld LLP on 8/20/2020

On Friday, August 14, California’s Office of Administrative Law (OAL) approved the final draft of the Attorney General’s (AG) regulations under the California Consumer Privacy Act (CCPA). Attorney General Xavier Becerra’s...more

Final CCPA regulations approved, including additional changes

Hogan Lovells on 8/18/2020

On Friday, the California Attorney General issued the final implementing regulations for the California Consumer Privacy Act (CCPA). The final regulations—which had been under review by the California Office of Administrative...more

The Spanish DPA's new take on cookies: back to express consent

Hogan Lovells on 7/31/2020

Last November, the Spanish Data Protection Authority (Spanish DPA) published its new Guidelines on the Use of Cookies within the framework of the GDPR and Spanish E-privacy rules. ...more

Cyber-Enabled Financial Crime and Money Laundering

Ballard Spahr LLP on 7/29/2020

Today we are very pleased to welcome guest blogger Moyara Ruehsen, PhD, CAMS, CFCS, who is an Associate Professor and Director of the Financial Crime Management Program at the Middlebury Institute of International Studies in...more

New DIFC Data Protection Law Takes Effect 1 July

Morgan Lewis on 6/25/2020

Requirements under a new Dubai International Financial Centre data protection law will apply within the DIFC from 1 July 2020. ...more

Second Modified CCPA Draft Regulations Released—Comments Due March 27

Hogan Lovells on 3/13/2020

On March 11, The California Attorney General (CA AG) released a second set of modifications to the proposed regulations implementing the California Consumer Privacy Act (CCPA)....more

CCPA Reality Check: 10 Key Questions to Evaluate Compliance

Coblentz Patch Duffy & Bass on 2/28/2020

With the CCPA (California Consumer Privacy Act) in effect as of January 1, but regulations still being revised and finalized, businesses are struggling to know what they need to do now to comply....more

Data Privacy Update: California AG Proposes CCPA Modifications

Mitratech Holdings, Inc on 2/26/2020

The California Attorney General’s office published revised proposed regulations for implementing the California Consumer Privacy Act (CCPA) on February 7, 2020. What are the implications for businesses trying to stay...more

58 Results

View per page

Page: of 3

Cybersecurity › Regulatory Requirements › Personally Identifiable Information

"My best business intelligence, in one easy email…"