States Consider Privacy and Data Security Legislation -
It’s that time of year again, when we see a flood of legislative activity at the state level on privacy and data security laws. A couple of recent examples are below....more
1/30/2020
/ Class Action ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Breach ,
Data Management ,
Data Privacy ,
Data Protection ,
Data Security ,
Equifax ,
EU-US Privacy Shield ,
Expedia ,
Federal Trade Commission (FTC) ,
General Data Protection Regulation (GDPR) ,
Google ,
Information Commissioner's Office (ICO) ,
Information Governance ,
Legislative Agendas ,
Marriott ,
Motion to Dismiss ,
Online Safety for Children ,
Orbitz ,
Personal Data ,
Privacy and Electronic Communications Regulation 2003 (PECR). ,
Proposed Legislation ,
Regulatory Violations ,
Settlement ,
State and Local Government ,
UK
The Florida Senate and House of Representatives are considering two bills (SB 1670 and HB 963) that, if adopted, will amend Florida law to create the state’s first comprehensive privacy law (though they do not go nearly as...more
1/28/2020
/ Biometric Information ,
California Consumer Privacy Act (CCPA) ,
Carve Out Provisions ,
Consent ,
Consumer Privacy Rights ,
Corporate Counsel ,
Cybersecurity ,
Data Collection ,
Data Management ,
Data Privacy ,
Data Protection ,
Florida ,
GLBA Privacy ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Information Governance ,
Internet Privacy ,
Legislative Agendas ,
Marketing ,
Online Platforms ,
Opt-Outs ,
Personal Data ,
Personally Identifiable Information ,
Privacy Laws ,
Proposed Amendments ,
Proposed Legislation ,
Proposed Regulation ,
Public Records ,
Records Request ,
Regulatory Agenda ,
Rulemaking Process ,
State and Local Government ,
Websites
SDNY Rejects Standing under “Increased Risk” Theory Where Data Not Targeted or Stolen -
The Southern District of New York rejected a settlement that would have resolved a class action based on the unauthorized (and...more
12/18/2019
/ Arbitration ,
Article III ,
Best Practices ,
Brazil ,
Cable Television Providers ,
Class Action ,
Comcast ,
Data Breach ,
Data Security ,
Data Storage ,
Electronic Data Transmissions ,
Electronic Protected Health Information (ePHI) ,
Email ,
Encryption ,
Enforcement Actions ,
EU ,
EU-US Privacy Shield ,
European Commission ,
Federal Trade Commission (FTC) ,
Health Care Providers ,
Health Insurance Portability and Accountability Act (HIPAA) ,
HIPAA Breach ,
Ireland ,
Legislative Agendas ,
Mobile Device Management ,
Mobile Devices ,
Motion to Dismiss ,
New Guidance ,
OCR ,
Personal Data ,
Personally Identifiable Information ,
PHI ,
Proposed Legislation ,
Ransomware ,
Regulatory Agenda ,
Right of Access ,
Risk Management ,
Settlement Agreements ,
Standing
California Adds Biometric Restrictions to Data-Breach Law, Potentially Creating a De Facto Biometric Privacy Law
Subject to the governor’s signature, California’s breach-notification law will gain additional requirements...more
9/25/2019
/ Biometric Information ,
Biometric Information Privacy Act ,
California Consumer Privacy Act (CCPA) ,
Consent ,
COPPA ,
Data Breach ,
Data Collection ,
Data Privacy ,
EU ,
EU-US Privacy Shield ,
FCC ,
Federal Trade Commission (FTC) ,
General Data Protection Regulation (GDPR) ,
Interactive Advertising Bureau ,
ISO ,
Legislative Agendas ,
Personal Data ,
Personally Identifiable Information ,
Proposed Legislation ,
Robocalling ,
Settlement Agreements ,
TCPA ,
Transparency ,
YouTube
Maine Bill Requires ISPs to Obtain Opt-In Consent from Customers -
The Maine legislature has passed a bill that requires internet service providers (ISPs) operating in Maine to obtain express, affirmative consent from...more
6/11/2019
/ Class Action ,
Consent ,
Data Breach ,
Data Privacy ,
Data Security ,
Data-Sharing ,
FCC ,
Health Insurance ,
HIPAA Breach ,
Information Technology ,
Internet Service Providers (ISPs) ,
Legislative Agendas ,
Opt-In ,
Opt-Outs ,
Pending Legislation ,
Personal Data ,
Popular ,
Premera Blue Cross ,
Robocalling ,
Settlement Agreements ,
Standing ,
State Data Breach Notification Statutes ,
Statutory Interpretation
The California Consumer Privacy Act: The Next Frontier -
The California Consumer Privacy Act (CCPA) has been called the beginning of America’s GDPR. As the most comprehensive privacy law in the United States, entities...more
6/5/2019
/ Algorithms ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Damages ,
Data Breach ,
Data Privacy ,
Fines ,
General Data Protection Regulation (GDPR) ,
Health Insurance Portability and Accountability Act (HIPAA) ,
HIPAA Breach ,
Legislative Agendas ,
Personal Data ,
Personally Identifiable Information ,
State and Local Government ,
State Data Breach Notification Statutes ,
TCPA
Hotel Chain Pays $12 Million to Resolve Privacy Violations -
Motel 6 settled claims with the Washington State Attorney General for $12 million to resolve charges that Motel 6 violated the Consumer Protection Act and the...more
4/18/2019
/ Biometric Information ,
California Consumer Privacy Act (CCPA) ,
Class Action ,
CNIL ,
Consumer Privacy Rights ,
Consumer Protection Act ,
Data Collection ,
EU-US Privacy Shield ,
France ,
Google ,
Guest Registry ,
Hospitality Industry ,
Immigrants ,
Legislative Agendas ,
Personally Identifiable Information ,
Proposed Legislation ,
Puerto Rico ,
SCOTUS ,
Search Results ,
Settlement Negotiations ,
Standing ,
State Data Breach Notification Statutes
Florida Introduces BIPA Legislation -
A Florida state senator has introduced an identical version of the Illinois Biometric Information Privacy Act (BIPA)....more
3/25/2019
/ Aetna ,
Biometric Information ,
Biometric Information Privacy Act ,
California Consumer Privacy Act (CCPA) ,
CNIL ,
Competition ,
COPPA ,
Data Breach ,
Data Collection ,
Data Privacy ,
Enforcement Actions ,
Facial Recognition Technology ,
Federal Trade Commission (FTC) ,
Fingerprints ,
General Data Protection Regulation (GDPR) ,
Legislative Agendas ,
Personal Data ,
Personally Identifiable Information ,
Popular ,
Proposed Amendments ,
Proposed Legislation ,
State and Local Government
An identical version of the Illinois Biometric Information Privacy Act (BIPA) has been introduced in the Florida Senate. The bill includes the same private right of action. ...more
3/4/2019
/ Biometric Information ,
Biometric Information Privacy Act ,
Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Facial Recognition Technology ,
Fingerprints ,
Legislative Agendas ,
Personal Data ,
Personally Identifiable Information ,
Proposed Legislation ,
State and Local Government