News & Analysis as of

Data Retention Enforcement Actions

Hughes Hubbard & Reed LLP

DOJ Antitrust Division Launches ‘Comply with Care’ Task Force to Combat Gamesmanship in Investigations

On Aug. 29, Assistant Attorney General (AAG) Gail Slater of the U.S. Department of Justice Antitrust Division announced the formation of a new “Comply with Care” task force....more

Paul Hastings LLP

You’ve Got Mail: NYDFS Enforcement Action Highlights Cybersecurity Risk of Over-Retention and Other Risks

Paul Hastings LLP on

On Aug. 14, 2025, the New York Department of Financial Services (NYDFS) issued a Consent Decree announcing that Healthplex, Inc. (Healthplex) has agreed to pay a $2 million fine, as a result of an investigation into a 2021...more

Smith Anderson

Preparing for Data Privacy Expansion in 2025: Is Your Business Ready?

Smith Anderson on

As we step into 2025, data privacy laws in the United States are evolving rapidly. With eight new state privacy laws taking effect, businesses face an increasingly complex web of compliance obligations—even in states without...more

Holland & Knight LLP

FTC Cracks Down on Selling Sensitive Location Info, Restricts Use of Consumer Data for 1st Time

Holland & Knight LLP on

The Federal Trade Commission (FTC) announced two significant enforcement actions last week – one against data broker Mobilewalla, Inc. and the other against data analytics provider Gravy Analytics, Inc. (and its subsidiary...more

BakerHostetler

Deeper Dive: Preserving Ephemeral Messaging - Capture Data Before Its Ghosts Haunt Your Compliance

BakerHostetler on

Organizations whose mantra is “We just never delete anything” (i.e., organizations simply retaining all information indefinitely) are now facing headwinds, especially when the information contains personal information. As our...more

Pillsbury - Consumer Protection Dispatch

GDPR Enforcement: Lessons from Recent Data Privacy Penalties

Recent decisions by the French data protection authority (CNIL) have highlighted the importance of GDPR compliance, particularly in the areas of data retention, consent for processing sensitive personal data, and marketing...more

Seward & Kissel LLP

SEC Enforcement Action Rundown

Seward & Kissel LLP on

Who may be interested: Registered Investment Advisers, Registered Investment Companies, Compliance Staff - Quick Take: The SEC recently announced a number of enforcement actions relating to recordkeeping failures,...more

Fisher Phillips

How Much Data is Too Much? 4 Steps Businesses Should Take as California Focuses On Data Minimization Requirements

Fisher Phillips on

Businesses take heed: California state officials just warned that the law prohibits you from collecting unnecessary data and retaining data for longer than necessary. The California Privacy Protection Agency published its...more

Gardner Law

CCPA Regulations to Take Effect Immediately

Gardner Law on

An appellate court recently ruled that the California Privacy Protection Agency’s regulations issued under the state’s California Consumer Privacy Act (”CCPA”) will take effect immediately. These regulations have been...more

WilmerHale

FTC Enters Consent Agreement With Blackbaud Following Major Data Breach

WilmerHale on

On February 1, the Federal Trade Commission (FTC or “the Commission”) announced that it had reached a settlement with Blackbaud, a software company, resolving claims related to a 2020 data breach that resulted in the...more

WilmerHale

Recent Enforcement Actions Signal FTC Focus on Protecting Location Data

WilmerHale on

On January 9, 2024, the Federal Trade Commission (FTC) issued its first ever prohibition on the use, sale and disclosure of sensitive location data against X- Mode Social and Outlogic (“X-Mode”), a location data broker. Only...more

WilmerHale

FTC Announces Groundbreaking Action Against Rite Aid for Unfair Use of AI

WilmerHale on

On December 19, 2023, the Federal Trade Commission (FTC) announced an enforcement action against  the retail pharmacy Rite Aid for unfair practices associated with its use of a facial recognition technology (FRT) surveillance...more

BakerHostetler

SEC and CFTC Show No Signs of Slowing Down Enforcement Actions for Financial Firms’ Use of Off-Channel Communications

BakerHostetler on

The settlements announced by the SEC and CFTC on Monday are a continuation of the regulators’ focus on off-channel communications by employees of registered entities....more

WilmerHale

FTC Announces Enforcement Action Against Microsoft Over COPPA Violations

WilmerHale on

On June 5th, the Federal Trade Commission (FTC) announced a settlement with Microsoft over alleged violations of the Children’s Online Privacy Protection Act (COPPA) for its data practices involving its Xbox live product. ...more

Epiq

Minimizing Data to Minimize Exposure: Information Governance and Data Security Overlap

Epiq on

How important is it for organizations to keep track of their data footprint? The Federal Trade Commission (FTC) thinks this is crucial. On Jan. 9, 2023, the FTC finalized a consent order following a breach. The order was...more

Hanzo

Financial Data Compliance and Enterprise Information Archiving

Hanzo on

When it comes to making sure financial data is safe and meets compliance regulations, understanding the different regulatory bodies and how they affect your organization is a vital first step. Two of the most common...more

Perkins Coie

FTC Scrutinizing Ed Tech Providers and Endorsements

Perkins Coie on

On May 19, 2022, at the Federal Trade Commission’s (FTC) first open meeting since the confirmation of Commissioner Alvaro Bedoya, the FTC unanimously approved two documents that signal its intention to strengthen its...more

Alston & Bird

SEC and CFTC Crackdown on Use of Personal Messaging Platforms Raises Compliance Concerns – and Opportunities

Alston & Bird on

Using personal devices and messaging platforms may be convenient (and ubiquitous), but it may run afoul of federal records retention rules. Our Investment Management, Trading & Markets and White Collar, Government & Internal...more

BakerHostetler

Businesses Must Contemplate Employees' Use of Messaging Apps on Personal Devices

BakerHostetler on

An investment management company was recently hit with $200 million in fines for failing to track employees’ use of personal messaging apps, which resulted in the loss of communications that were subject to regulatory...more

BCLP

FTC Says that One Cannot Retain the Fruit of the Tainted Tree

BCLP on

Setting new precedent in the world of data, the FTC has found that the work product of ill-gotten data is no longer retainable by the developer.  On January 11, 2021, the U.S. Federal Trade Commission (FTC) announced that it...more

Rothwell, Figg, Ernst & Manbeck, P.C.

FTC Settles with Everalbum Over Misuse of Facial Recognition Technology

On Monday, the Federal Trade Commission (FTC) announced a settlement with Everalbum, Inc., the California-based developer of a photo app called “Ever,” with regard to allegations that the company deceived consumers about the...more

Society of Corporate Compliance and Ethics...

H&M fined 35 million euros for GDPR violation

CEP Magazine (December 2020) - The Hamburg Data Protection Authority issued their largest fine ever under the General Data Protection Regulation (GDPR) for employee-related offenses. A fine of more than €35 million was...more

Polsinelli

H&M Fined 37.8 Million Dollars for Alleged GDPR Violations

Polsinelli on

What Happened? On October 1, 2020, the Hamburg Data Protection Commissioner (“Hamburg DPA”) fined clothing retailer H&M 37.8 million dollars (EURO 35.2 million) for several violations of the GDPR....more

Polsinelli

Client Update: H&M Fined 37.8 Million Dollars for Alleged GDPR Violations

Polsinelli on

What Happened? On October 1, 2020, the Hamburg Data Protection Commissioner (“Hamburg DPA”) fined clothing retailer H&M 37.8 million dollars (EURO 35.2 million) for several violations of the GDPR....more

Hogan Lovells

The Cathay Pacific Breach: Is Data Protection and Cyber Security Law in Hong Kong About to Receive an Upgrade?

Hogan Lovells on

On 6 June, 2019, the Privacy Commissioner for Personal Data (the “PCPD“) issued an enforcement notice against Cathay Pacific Airways (and its affiliate Hong Kong Dragon Airlines) (together, “Cathay Pacific“) in respect of a...more

32 Results
 / 
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide