On June 17, 2021, Senator Kirsten Gillibrand (D-NY) announced the reintroduction of the Data Protection Act of 2021, which would create an independent federal agency, the Data Protection Agency, to “regulate high-risk data practices and the collection, processing, and sharing of personal data.”
Continue Reading Senator Gillibrand Announces Renewed Data Protection Act 2021
Consumer Protection
CCPA’s Metrics Reporting Deadline Approaching
Posted on
Posted in Information Security, U.S. State Law
July 1, 2021 marks the deadline for certain businesses to comply with the metrics reporting obligations under the California Consumer Privacy Act of 2018 regulations.…
Continue Reading CCPA’s Metrics Reporting Deadline Approaching
Now Playing at the FTC: MoviePass Data Security Case and ROSCA Settlement
Posted on
This week, the Federal Trade Commission voted 3 to 1 to accept a settlement agreement with MoviePass, Inc., its parent company, and two of the now-defunct company’s former employees, after allegations of data security issues and deceptive trade practices.…
Continue Reading Now Playing at the FTC: MoviePass Data Security Case and ROSCA Settlement
CIPL Submits Comments on China’s Updated Draft Personal Information Protection Law
Posted on
The Centre for Information Policy Leadership at Hunton Andrews Kurth LLP has submitted its response to the Standing Committee of the National People’s Congress of the People’s Republic of China on the updated version of the Draft Personal Information Protection Law.…
Continue Reading CIPL Submits Comments on China’s Updated Draft Personal Information Protection Law
UK Court of Appeal Signals It Will Closely Scrutinize UK DPA Exemptions
Posted on
Posted in European Union, Information Security
On May 26, 2021, the Court of Appeal handed down its judgment in the case of R (Open Rights Group and the3million) v Secretary of State for the Home Department and Others [2021] EWCA Civ 800, finding that the UK 2018 Data Protection Act’s “immigration exemption” is unlawful.…
Continue Reading UK Court of Appeal Signals It Will Closely Scrutinize UK DPA Exemptions
HHS Reaches Settlement with Clinical Laboratory for Alleged Violations of HIPAA Security Rule
Posted on
On May 25, 2021, the Office for Civil Rights of the U.S. Department of Health and Human Services announced that it had reached a settlement with a clinical laboratory for violations of the HIPAA Security Rule. As part of this settlement, the company agreed to pay OCR $25,000 and to implement a robust corrective action plan. …
Continue Reading HHS Reaches Settlement with Clinical Laboratory for Alleged Violations of HIPAA Security Rule
U.S. Treasury Announces Cryptocurrency Reporting Requirements
Posted on
On May 20, 2021, the U.S. Department of the Treasury announced a proposal that would require any cryptocurrency transaction of $10,000 or more to be reported to the Internal Review Service.…
Continue Reading U.S. Treasury Announces Cryptocurrency Reporting Requirements
New York AG Settles with Filters Fast After Data Breach
Posted on
On May 18, 2021, New York Attorney General (“AG”) Letitia James announced a settlement agreement with Filters Fast LLC (“Filters Fast”) over a data breach that compromised personal information of approximately 324,000 consumers nationwide, including over 16,500 New York state residents. The breach affected purchases made on Filters Fast website for almost a year – from July 16, 2019 to July 10, 2020. …
Continue Reading New York AG Settles with Filters Fast After Data Breach
New York City Council Passes Tenant Data Privacy Act
Posted on
Posted in Information Security, U.S. State Law
On April 29, 2021, the New York City Council passed the Tenant Data Privacy Act, which would regulate the collection, use, safeguarding and retention of tenant data by owners of “smart access” buildings. The TDPA has now been sent to the New York City Mayor’s desk for signature.…
Continue Reading New York City Council Passes Tenant Data Privacy Act
Senate Bill Would Expand Federal Children’s Privacy Protections
Posted on
On May 11, 2021, Senators Edward Markey (D-MA) and Bill Cassidy (R-LA) introduced the Children and Teens’ Online Privacy Protection Act. The Bill, which would amend the existing Children’s Online Privacy Protection Act, would prohibit companies from collecting personal information from children ages 13 to 15 without their consent.…
Continue Reading Senate Bill Would Expand Federal Children’s Privacy Protections