On September 15, 2022, the Federal Trade Commission released a report analyzing “dark patterns,” or “design practices that trick or manipulate users into making choices they would not otherwise have made and that may cause harm.”
Continue Reading FTC Releases Report on Dark Patterns
Information Security
NHTSA Publishes Final Cybersecurity Best Practices
Posted on
Posted in Cybersecurity, Information Security
On September 9, 2022, the National Highway Traffic Safety Administration announced its publication of final Cybersecurity Best Practices for the Safety of Modern Vehicles. …
Continue Reading NHTSA Publishes Final Cybersecurity Best Practices
Indonesia Enacts its First Data Protection Act
Posted on
On September 20, 2022, Indonesia’s parliament ratified the Personal Data Protection Act. …
Continue Reading Indonesia Enacts its First Data Protection Act
SEC Fines Morgan Stanley $35 Million for Alleged Failure to Protect Customer Data
Posted on
Posted in Financial Privacy, Information Security
On September 20, 2022, the U.S. Securities and Exchange Commission announced that Morgan Stanley Smith Barney agreed to pay a $35 million fine for the firm’s alleged failure to adequately protect the personal information of approximately 15 million customers.
Continue Reading SEC Fines Morgan Stanley $35 Million for Alleged Failure to Protect Customer Data
New California Legislation Adds to Existing Smart Device Labeling Requirements
Posted on
Posted in Information Security, U.S. State Law
On September 6, 2022, the California legislature presented Assembly Bill 2392 to Governor Gavin Newsom. AB-2392, which has not yet been signed by Governor Newsom, would allow Internet-connected device manufacturers to satisfy existing device labeling requirements by complying with National Institute of Standards and Technology standards for consumer Internet of Things products.
Continue Reading New California Legislation Adds to Existing Smart Device Labeling Requirements
FTC Commercial Surveillance and Data Security Forum Highlights Industry and Consumer Perspectives
Posted on
Posted in Information Security
On September 8, 2022, the Federal Trade Commission hosted a virtual public forum on its Advanced Notice of Proposed Rulemaking concerning “commercial surveillance and lax data security.” …
Continue Reading FTC Commercial Surveillance and Data Security Forum Highlights Industry and Consumer Perspectives
Wawa Inc. Settles Multi-State AG Breach Investigation for $8 Million
Posted on
On July 26, 2022, the attorneys general of New Jersey, Pennsylvania, Delaware, Maryland, Virginia, Florida and Washington D.C. announced an $8 million multistate settlement with Wawa Inc. that resolves the states’ investigation into a 2019 data breach that compromised approximately 34 million payment cards used by consumers at Wawa stores and fueling locations. …
Continue Reading Wawa Inc. Settles Multi-State AG Breach Investigation for $8 Million
FTC Releases Agenda for Commercial Surveillance and Data Security Forum
Posted on
Posted in Children’s Privacy, Information Security
On August 29, 2022, the Federal Trade Commission released the agenda for its virtual public forum on the Commercial Surveillance and Data Security Advanced Notice of Public Rulemaking. …
Continue Reading FTC Releases Agenda for Commercial Surveillance and Data Security Forum
New York Becomes First State to Require CLE in Cybersecurity, Privacy and Data Protection
Posted on
Posted in Cybersecurity, Information Security
New York recently became the first state to require attorneys to complete at least one credit of cybersecurity, privacy and data protection training as part of their continuing legal education requirements. The new requirement will take effect July 1, 2023.
Continue Reading New York Becomes First State to Require CLE in Cybersecurity, Privacy and Data Protection
FTC Seeks Public Comment Regarding Data Privacy and Security Rulemaking
Posted on
On August 11, 2022, the Federal Trade Commission announced it is seeking public comment regarding its advance notice of proposed rulemaking on commercial surveillance and data security. …
Continue Reading FTC Seeks Public Comment Regarding Data Privacy and Security Rulemaking