On October 1, 2021, Connecticut’s two new data security laws went into effect. The new laws modify Connecticut’s existing breach notification requirements and establish a safe harbor for businesses that create and maintain a written cybersecurity program.
Continue Reading UPDATE: New Connecticut Breach Notification Requirements and Cybersecurity Safe Harbor Are Now in Effect
Gramm Leach Bliley Act
New Connecticut Breach Notification Requirements and Cybersecurity Safe Harbor Effective October 2021
Posted on
Connecticut recently passed two cybersecurity laws that will become effective on October 1, 2021. The newly passed laws modify Connecticut’s existing breach notification requirements and establish a safe harbor for businesses that create and maintain a written cybersecurity program that complies with applicable state or federal law or industry-recognized security frameworks.…
Continue Reading New Connecticut Breach Notification Requirements and Cybersecurity Safe Harbor Effective October 2021
Nevada’s Governor Expands State’s Internet Privacy Law That Previously Limited Right to Opt Out of Sales
Posted on
Posted in Information Security, U.S. State Law
On June 2, 2021, Nevada’s governor approved SB 260 (the “Amendment Bill”), which expands on the previously amended Nevada Privacy of Information Collected on the Internet from Consumers Act (the “Act”). Specifically, the Amendment Bill broadens the definition of key terms along with providing several new exemptions.
…
Continue Reading Nevada’s Governor Expands State’s Internet Privacy Law That Previously Limited Right to Opt Out of Sales
FTC Announces Enforcement for Inadequate Third-Party Risk Management Practices Under the GLBA’s Safeguards Rule
Posted on
On December 15, 2020, the Federal Trade Commission announced a proposed settlement with Ascension Data & Analytics, LLC, a Texas-based mortgage industry data analytics company, to resolve allegations that the company failed to ensure one of its vendors was adequately securing personal information of mortgage holders.…
Continue Reading FTC Announces Enforcement for Inadequate Third-Party Risk Management Practices Under the GLBA’s Safeguards Rule
Financial Regulators Announce Proposed 36-Hour Notification Requirement for Notification Incidents
Posted on
Posted in Financial Privacy, U.S. Federal Law
On December 18, 2020, federal financial regulatory agencies announced a proposed rule that would require “banking organizations” to notify their primary federal regulator within 36 hours following any “computer-security incident” that rises to the level of a “notification incident.” The Proposed Rule also would require service providers to notify at least two individuals at the banking organizations they service immediately after experiencing a computer security incident that materially disrupts, degrades or impairs the services they provide.…
Continue Reading Financial Regulators Announce Proposed 36-Hour Notification Requirement for Notification Incidents
Consumer Financial Protection Bureau Issues Notice of Proposed Rulemaking Regarding Access to Financial Information
Posted on
Posted in Financial Privacy, U.S. Federal Law
On October 22, 2020, the Consumer Financial Protection Bureau issued a notice of proposed rulemaking to implement Section 1033 of the Dodd-Frank Act regarding consumers’ access to their financial information.…
Continue Reading Consumer Financial Protection Bureau Issues Notice of Proposed Rulemaking Regarding Access to Financial Information
FTC Postpones Safeguards Rule Workshop until July
Posted on
Posted in Financial Privacy, U.S. Federal Law
As part of its regulatory review of the Gramm-Leach-Bliley Act Safeguards Rule, the Federal Trade Commission will hold a workshop, Information Security and Financial Institutions: An FTC Workshop to Examine the Safeguards Rule. The workshop, originally scheduled for May, has been postponed until July 13, 2020.…
Continue Reading FTC Postpones Safeguards Rule Workshop until July
Washington, D.C. Amends Data Breach Notification Law, Adds Data Security Requirements
Posted on
Posted in U.S. Federal Law
On March 26, 2020, Washington D.C. enacted bill number B23-0215, amending D.C.’s data breach notification law.…
Continue Reading Washington, D.C. Amends Data Breach Notification Law, Adds Data Security Requirements
New York SHIELD Act Requires Safeguards to Protect Private Information
Posted on
On March 21, 2020, the data security provisions of New York’s Stop Hacks and Improve Electronic Data Security Act went into effect. The SHIELD Act requires any person or business owning or licensing computerized data that includes the private information of a resident of New York to implement and maintain reasonable safeguards to protect the security, confidentiality and integrity of the private information.…
Continue Reading New York SHIELD Act Requires Safeguards to Protect Private Information
Mortgage Broker Settles FTC Privacy Charges That It Improperly Disclosed Consumer Information on Review Site
Posted on
As reported on our Hunton Retail Law Resource blog, on January 7, 2020, the Federal Trade Commission announced a settlement with Mortgage Solutions FCS, Inc., and its sole principal, Ramon Walker, to resolve allegations that the lender violated the FTC Act, the Fair Credit Reporting Act and the Gramm-Leach-Bliley Act, by improperly disseminating consumers’ personal information on Yelp in response to consumers’ negative reviews posted to that site.…
Continue Reading Mortgage Broker Settles FTC Privacy Charges That It Improperly Disclosed Consumer Information on Review Site