News & Analysis as of

Data Security Personal Data

Morgan Lewis

China’s New Standard on Sensitive Personal Information Goes Into Effect November 1

Morgan Lewis on

In a move to further bolster data privacy, China’s State Administration for Market Regulation and the Standardization Administration of China jointly issued a national standard, GB/T 45574-2025, Data Security Technology –...more

WilmerHale

Texas Expands and Modifies Data Broker Registration Law

WilmerHale on

On June 20, 2025, the Texas governor signed two bills amending the Texas Data Broker Act (also the “Act”) into law (SB 2121 and SB 1343). Both bills went into effect on September 1, 2025. ...more

DLA Piper

Thailand: PDPA Crackdown 2025: Are You Next? – Major Fines and Lessons from Thailand’s Latest Enforcement

DLA Piper on

Since the full enforcement of Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) in June 2022, the Personal Data Protection Committee (“PDPC”) has moved decisively from awareness-building to active enforcement....more

Moore & Van Allen PLLC

CFPB Returns to Rulemaking on Personal Financial Data Rights Rule 1033

Moore & Van Allen PLLC on

On August 22nd, the Consumer Financial Protection Bureau (the “CFPB”) published an advanced notice of proposed rulemaking (an “ANPR”) relating to a reconsideration of the CFPB’s current Personal Financial Data Rights Rule...more

McCarter & English, LLP

A Hole in the Net: Massachusetts’s Six-Figure Penalty for Failure to Spot Phish

Massachusetts recently joined a growing number of states pursuing data privacy enforcement actions, announcing a $795,000 settlement with Peabody Properties, Inc., a Massachusetts-based firm. The property company oversees...more

DLA Piper

Germany: Further Judgment on Non-Material Damages for Loss of Control over Personal Data

DLA Piper on

In its judgment of May 13, 2025 (case number VI ZR 186/22), the German Federal Court of Justice (Bundesgerichtshof – “BGH”) continued its case law on the compensability of non-material damages under Article 82 GDPR, in...more

EDRM - Electronic Discovery Reference Model

Illumination Zone: Episode 211 | Todd Tabor of HaystackID sits down with Kaylee & Mary

In the thirty-second episode of EDRM Trusted Partner, HaystackID’s monthly podcast series, Todd Tabor, Vice President of Project Management Operations, Forensics, for our wonderful Trusted Partner, HaystackID sits down with...more

Orrick, Herrington & Sutcliffe LLP

CFPB proposes new rule to implement Section 1033 on consumer data rights

On August 22, the CFPB issued an advance notice of proposed rulemaking in the Federal Register seeking public comments and data to inform its decisions on implementing Section 1033 of the Dodd-Frank Act (the Personal...more

Benesch

Businesses Must Be Ready for Additional October Compliance Obligations under the DOJ’s Bulk Data Transfer Rule when Interacting...

Benesch on

On April 8, 2025, the Bulk Data Transfer Rule went into effect. It became enforceable on July 8, 2025; however, many of the technical enforcement obligations under the Bulk Data Transfer Rule become enforceable on October 6,...more

Baker Botts L.L.P.

Canada's Officer of the Privacy Commissioner Issues Guidance on Biometric Data Processing

Baker Botts L.L.P. on

On August 11, 2025, the Office of the Privacy Commissioner of Canada ("OPC") issued two sets of guidance for processing of individual's biometric data: one for federal institutions and one for private businesses. Below we...more

McDermott Will & Schulte

Data breach litigation targets wine company: Lessons for alcohol industry players

On July 30, 2025, a wine producer was sued in connection with a cyberattack that allegedly compromised the data of at least 26,000 customers. Among other things, the complaint alleges that the company failed to implement...more

Hogan Lovells

Thailand ramps up data protection enforcement

Hogan Lovells on

Thailand's Personal Data Protection Committee (“PDPC”) has significantly intensified its enforcement of Thailand's Personal Data Protection Act B.E. 2562 (2019) (“PDPA”), announcing on 1 August 2025 eight new administrative...more

Parker Poe Adams & Bernstein LLP

Key Compliance Measures Start This Fall for Companies Under New DOJ Data Security Program

Earlier this spring, the U.S. Department of Justice’s National Security Division (NSD) launched the data security program (DSP). The program is designed to address national security risks posed by foreign adversaries' access...more

HaystackID

Tea Dating App Breach Reveals Major Data Privacy Gaps in Rapidly Growing Platforms

HaystackID on

In July 2025, a 4chan user posted a simple Python script. Within hours, thousands of women’s driver’s licenses, selfies, and intimate conversations were spreading across the dark corners of the internet. The source? An app...more

IR Global

Protecting yourself from job scams

IR Global on

Keeping you and your money safe is our top priority, and we have stringent safeguarding measures in place to help protect all our customers. But there are also steps you need to take to protect yourself from fraud....more

Troutman Pepper Locke

Under the Radar: DOJ's Data Security Rules and Their Impact on Payments Companies — Payments Pros – The Payments Law Podcast

Troutman Pepper Locke on

In this episode of Payments Pros, Carlin McCrory is joined by Pete Jeydel, a partner in the firm's White Collar Litigation + Investigations Practice Group, to discuss the new Department of Justice (DOJ) Data Security Program...more

Troutman Amin LLP

ATTENTION ATTENTION: Minnesota’s Data Privacy Act Is Now Law As Of Today- July 31, 2025!

Troutman Amin LLP on

Starting today, July 31, 2025, the Minnesota Consumer Data Privacy Act (“MCDPA”) officially takes effect. Signed by Governor Tim Walz in May 2024, this act majorly affects how the personal data of Minnesota residents is...more

Constangy, Brooks, Smith & Prophete, LLP

What the Sensitive Data Rule means for “bulk data” and National Security compliance

As of July 9, the U.S. Department of Justice has begun full enforcement of a sweeping new data regulation known as the Sensitive Data Rule, or “SDR.” Implemented under President Biden’s Executive Order 14117, the SDR marks a...more

Fisher Phillips

AI Governance and Data Minimization in the 5G Era: What Employers and Providers Must Consider Now

Fisher Phillips on

As 5G connectivity becomes more widely deployed, organizations across all industries are leaning into AI tools that promise speed, automation, and deeper insights. But the combined power of 5G + AI creates an urgent...more

Foley & Lardner LLP

DOJ Enforcement Under the National Security Division’s Data Security Program

Foley & Lardner LLP on

Protecting sensitive data has never been more important. In a globalized world of advanced cyber threats, sophisticated espionage techniques, and external data monetization, increased security is crucial to safeguard...more

WilmerHale

AI and GDPR: A Road Map to Compliance by Design - Episode 3: The Design Phase

WilmerHale on

The rise of artificial intelligence (AI) and its widespread availability offers significant growth opportunities for businesses. However, it necessitates a robust governance framework to ensure compliance with regulatory...more

Hogan Lovells

Singapore censures use of national identification numbers for authentication

Hogan Lovells on

On 26 June 2025, Singapore’s Personal Data Protection Commission (PDPC) and Cyber Security Agency (CSA) released a joint statement advising organizations to stop “as soon as possible” the practice of using Singapore national...more

Fox Rothschild LLP

Web Filtering: What Employers Need to Know

Fox Rothschild LLP on

Employers are increasingly monitoring and filtering the web browsing habits of employees. The Commission Nationale de l’Informatique et des Libertés (CNIL) recently released new guidance (for public comment) on how...more

Mayer Brown

Hong Kong Privacy Commissioner for Personal Data Completes Compliance Checks on the Use of AI and Data Privacy

Mayer Brown on

INTRODUCTION - Artificial intelligence ("AI") has rapidly transitioned from experimental use to widespread adoption across Hong Kong. Organisations are now leveraging AI models to enhance customer service, improve risk...more

Jackson Lewis P.C.

We get Privacy for work – Episode 6: The Potential Privacy Risks Inherent to Mergers and Acquisitions

Jackson Lewis P.C. on

To say mergers and acquisitions present significant risk is an understatement; however, additional vulnerabilities are being exposed as bad actors threaten to exploit privacy and data security leaks during the transition. ...more

1,035 Results
 / 
View per page
Page: of 42

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide