Monthly Archives: October 2009

FTC Extends Enforcement Deadline for Red Flags Rule (Again)

The FTC today announced that it would, for the fourth time, delay enforcement of the Identity Theft Red Flags Rule.  The enforcement date is now June 1, 2010 for creditors and financial institutions subject to FTC jurisdiction.  The agency stated that the delay was requested by members of Congress, who are currently considering a bill … Continue Reading

Interim Final Rule Implements Increased Penalties for HIPAA Violations

The Department of Health and Human Services (“HHS”) released an interim final rule to incorporate the Health Information Technology for Economic and Clinical Health Act (“HITECH Act”) categories of violations and tiered civil penalty amounts.  The interim final rule is expected to be published in the Federal Register on October 30, 2009 and takes effect … Continue Reading

International Conference of Data Protection and Privacy Commissioners

On November 4, join our privacy professionals at the 31st International Conference of Data Protection and Privacy Commissioners in Madrid, Spain.  Participate in various presentations on ways to manage the most challenging data protection issues in today’s global environment.  In addition, the International Association of Privacy Professionals (“IAPP”) will host a Data Protection and Privacy … Continue Reading

Provincial Consumer Protection Regulations in China May Affect Personal Data

Although China has yet to enact a national data protection law, certain provincial-level rules implementing national consumer protection laws impact the collection and use of personal data.  These provincial regulations may warrant specific attention by entities doing business in the relevant Chinese provinces.  The impact of each of these will often be limited, both because … Continue Reading

As Red Flags Deadline Looms, Attempts to Limit Scope Advance

The November 1st deadline for compliance with the FTC’s Red Flags Rule Identity Theft Prevention Program requirements is rapidly approaching.  Of late, there has been a flurry of activity aimed at limiting the scope of the rule.  The Red Flags Rule, which was jointly promulgated by several federal agencies in November 2007, requires all “creditors” … Continue Reading

Agencies Expected to Publish Final Gramm-Leach-Bliley Act Model Privacy Notice

The federal financial services agencies are expected to shortly announce a proposed-final Gramm-Leach-Bliley Act (“GLBA”) model form privacy notice.  The model notice incorporates financial institutions’ required disclosures pursuant to Section 503 of the GLBA.  Financial institutions that use the form to provide notice to consumers will be deemed in compliance with the privacy notice provisions … Continue Reading

Federal Trade Commission Comes out Swinging: Two-Day Enforcement Haul Totals More than $18.5 Million

The Federal Trade Commission is having a very busy week, announcing settlements in three high profile cases all before the close of business Tuesday. The FTC today announced a settlement with MoneyGram International, Inc., the second largest provider of money transfer services in the U.S., which allegedly facilitated a host of fraudulent activities undertaken by … Continue Reading

Former UK Information Commissioner Richard Thomas CBE Joins Hunton & Williams

Hunton & Williams is pleased to announce that Richard Thomas CBE, the former UK Information Commissioner, has joined the firm as Global Strategy Adviser.  Richard Thomas was the UK’s Information Commissioner from November 2002 until his retirement at the end of June 2009.  He was appointed by HM The Queen and held independent status, reporting … Continue Reading

Australia to Reform Privacy Laws

On October 14, 2009, the Australian government released a report entitled “Enhancing National Privacy Protection” that contains proposed reforms to Australia’s privacy laws, including the Privacy Act 1988 (“Privacy Act”).  In announcing the report, Cabinet Secretary and Special Minister of State Joe Ludwig stated that the reforms aim to “provide for one set of streamlined … Continue Reading

New FTC Blog Guidelines Affect Companies Without Blogs

On October 5, 2009, the Federal Trade Commission (“FTC”) issued amendments to its Guides for the Use of Endorsements and Testimonials in Advertising (“Guides”).  Reactions to the amendment have primarily focused on the provisions that require bloggers to disclose their relationship with companies whose products they endorse.  Largely absent from the commentary, however, have been … Continue Reading

New UK Information Commissioner Sets His Agenda

The new UK Information Commissioner, Christopher Graham, shared his vision for data protection regulation at his first conference speech in London yesterday.  As the keynote speaker at the 8th Annual Privacy and Data Protection Conference, chaired by Hunton & Williams partner, Bridget Treacy, Christopher Graham positioned himself as a fair, but tough, regulator who will … Continue Reading

End to End Trust and the Need for Widespread Collaboration

Lisa J. Sotto, Partner and Chair of Hunton & Williams’ Privacy and Information Management practice, discusses the roles individuals, companies, service providers and governments play in helping to create a safer, more trusted Internet.   End to End Trust is Microsoft’s broad and all encompassing vision for creating a “safer, more trusted Internet,” which is achieved … Continue Reading

FTC Takes Additional Safe Harbor-Related Enforcement Actions

On October 6, 2009, the Federal Trade Commission (“FTC”) announced proposed settlement agreements with six companies over charges that they falsely claimed membership in the U.S. Department of Commerce Safe Harbor program.  In six separate complaints, the FTC alleged that ExpatEdge Partners LLC, Onyx Graphics, Inc., Directors Desk LLC, Collectify LLC, and Progressive Gaitways LLC deceived … Continue Reading

Boxing and Concepts of Harm: Are Consumers Suffering a TKO on Content?

Maybe, but it’s not that kind of “boxing”…think walls and a lid instead of a ring.  “Boxing is where a consumer’s vision and choices are limited by his or her digital history and the analytics that make judgments based on that digital history.”  Government agencies are concerned with outcome-based analytics and its impact on consumer … Continue Reading

Draft Recommendation on Online Profiling in the Private Sector

On October 2, the Council of Europe’s Consultative Committee of the Convention 108 on Data Protection (“T-PD”) for the first time made publicly available its “Draft Recommendation on the Protection of Individuals with regard to Automatic Processing of Personal Data in the Framework of Profiling.”  When it is finalized, the Draft Recommendation will be one … Continue Reading

HHS Posts Breach Notice Reporting Form

The Department of Health and Human Services (“HHS”) has posted to its website a notification form that may be used to report breaches of unsecured protected health information to the agency.  Although some state agencies requiring notice of a breach employ a standard reporting form, the form issued by HHS has several unique features and … Continue Reading

Report Finds America Rejects Targeting Setting-Up Policy Debate

In its announcement that it would convene a series of public roundtables to address developing privacy issues, the Federal Trade Commission requested empirical data on consumer privacy expectations. In response to that request, researchers at the University of California at Berkeley and the University of Pennsylvania have released a study entitled "Americans Reject Tailored Advertising." … Continue Reading