News & Analysis as of

State Data Breach Notification Statutes

Data Breach Notification Revisions in North Carolina Would Bring Radical Change

by Vedder Price on

A North Carolina bill designed to strengthen the state’s data breach notification statute could radically change incident response. Through the Act to Strengthen Identity Theft Protections, North Carolina could quickly become...more

Businesses Take Note: Updates to Maryland’s Data Breach Notification Law Take Effect January 1, 2018

by Pessin Katz Law, P.A. on

What are businesses required to do when personal information they have collected is breached? Most states have breach notification laws with varying degrees of security and notice requirements. With high profile data...more

(Another) Federal Data Breach Notification Law Introduced in Congress

by Wilson Elser on

Senate Democrats have introduced a third iteration of a federal data breach notification bill, the Data Security and Breach Notification Act of 2017 (S.B. 2179). If passed into law, this bill would replace the patchwork of 48...more

The Government’s Role in Promoting and Leading Effective Cybersecurity

by Morgan Lewis on

Introduction - Data breaches have the power to inflict significant damage and consequences with the potential to bring a company, industry or government agency to its knees, or adversely harm those individuals whose...more

NAIC Adopts Insurance Data Security Model Law

by Wilson Elser on

On October 24, 2017, the National Association of Insurance Commissioners (NAIC) adopted the Insurance Data Security Model Law. The NAIC is the U.S. standards-setting and regulatory support organization created and governed by...more

State Data Breach Notification Statutes: 2017 Year in Review

by Fisher Phillips on

Continuing a trend in the last few years, in 2017, eight states amended their security breach notification laws to expand definitions of “personal information”, specify the timeframe in which notification must be provided,...more

Avoiding Data Breaches: Lessons From Regulations

by Revision Legal on

In January of 2017, an amendment to the Federal Acquisitions Regulation (“FAR”) went into effect related to protecting private personal information and requiring privacy training for all federal government contractors. The...more

Part Two: In-Depth Look at New York’s New Data Security Bill

Second in a two-part series. Last week, in the first part of this series, we examined several key aspects of New York’s proposed data security law, Stop Hacks and Improve Data Security Act or SHIELD Act. In our second and...more

Is There Automatic Civil Liability For A Data Breach?

by Fisher Phillips on

No! It is a common misconception among the general public that someone always has to pay when there is a data breach. It is understandable that individuals affected by a data breach will be upset, distraught, and even angry....more

An In-Depth Look at New York’s New Data Security Bill

First in a two-part series. As we reported last week, New York Attorney General Eric T. Schneiderman has introduced a bill aimed at protecting New Yorkers from data breaches. The Stop Hacks and Improve Data Security Act or...more

Maryland Data Breach Notification Law Updated: Effective 1/1/18

The Maryland Personal Information Protection Act has been updated and the new provisions are effective January 1, 2018. The new law expands the definition of personal information that is protected under the statute....more

Data Privacy + Cybersecurity Insider - November 2017 #2

by Robinson & Cole LLP on

Michigan Governor Rick Snyder has signed into law the Cyber Civilian Corps Act, which established the Michigan Cyber Civilian Corps, dubbed MiC3. The corps has been in existence for three years but not statutorily deployed. ...more

Privacy & Cybersecurity Update - October 2017

In this month's edition of our Privacy & Cybersecurity Update, we examine the European Commission's annual review of the Privacy Shield, a potential threat to the European Union's "standard contractual clauses," a push by...more

ALERT: Prepare to be Ransomed: A Primer on Legal Obligations Before and After Ransomware Strikes

by Pullman & Comley, LLC on

According to a recent U.S. Government Interagency report, ransomware is the fastest growing malware threat, targeting users of all types. An incredible 51 percent of respondents in a January 2017 study by the Ponemon...more

What American Companies Need to Know about the EU’s New General Data Protection Regulation (GDPR)

by Fisher Phillips on

The General Data Protection Regulation (GDPR) is a new data privacy and security law in Europe that will go into force on May 25, 2018. Every organization that does business with EU customers, regardless of the home base of...more

State Data Breach Notification Laws

by Foley & Lardner LLP on

While most state data breach notification statutes contain similar components, there are important differences, meaning a one-size-fits-all approach to notification will not suffice. What’s more, as data breaches continue to...more

Hazards Ahead: Uptick In Biometric Privacy Laws Can Put Employers In Hot Seat

by Seyfarth Shaw LLP on

Seyfarth Synopsis: A string of recent class action lawsuits regarding businesses’ use of employees’ biometric data should put employers on heightened alert regarding compliance with various state biometric privacy laws....more

The Data Report Episode 14: Zero Day

by Bilzin Sumberg on

Module Four: When It All Goes Wrong (Part III) Once a data breach is discovered there is a limited amount of time to begin assessing, addressing, and eliminating the problem. In this episode of The Data Report, Litigation...more

[Event] 2017 Cybersecurity Symposium - October 23rd, Los Angeles, CA

by Nossaman LLP on

Nossaman LLP and University of California, Irvine School of Law invite you to join us for "Cybersecurity, Data Breach, and Privacy: A Real World Perspective on Prevention, Response and the Future." This complimentary...more

The Mintz Matrix – September 2017

As data breaches dominate national headlines it remains important as ever for businesses to invest in security and to be ready to respond if a breach occurs. Part of your preparedness program should be staying current on data...more

Vendor Breaches and Their Implications for Employers

by Littler on

The announcement by Equifax, Inc. that it had been victimized in a hacking incident involving the personal information of 143 million Americans generated headlines this past week. The sheer size of the hack means that most...more

Equifax Breach Affects 143M: If GDPR Were in Effect, What Would Be the Impact?

by Foley & Lardner LLP on

The security breach announced by Equifax Inc. on September 7, 2017, grabbed headlines around the world as Equifax revealed that personal data of roughly 143 million consumers in the United States and certain UK and Canadian...more

Compliance with Initial New York DFS Cybersecurity Rules Now Mandatory

As of August 28, 2017, insurance companies, banks, and other financial services companies regulated by the New York Department of Financial Services (“DFS”) must comply with an initial wave of new cybersecurity requirements...more

Delaware Amends Personal Information Protection Law

by Moore & Van Allen PLLC on

On August 17, 2017, Delaware amended its personal information protection law, Delaware Code Title 6, Chapter 12B. The amendment becomes effective 240 days after enactment or March 14, 2018. The amended law significantly...more

Adventures in State Data Breach Laws: Maryland Becomes the Next to Amend.

As we have noted before in this space, states have begun going through the process of amending their data breach notification laws. California, for example, recently amended its data breach notification statute to expand the...more

122 Results
|
View per page
Page: of 5
Cybersecurity

"My best business intelligence,
in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up using*

Already signed up? Log in here

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.