On June 3, 2021, the U.S. Supreme Court in Van Buren v. United States reversed the U.S. Court of Appeals for the Eleventh Circuit’s decision to uphold the conviction of Nathan Van Buren, who was alleged to have violated the Computer Fraud and Abuse Act of 1986.
Continue Reading United States Supreme Court Adopts Narrow Interpretation of Scope of Liability Under the Computer Fraud and Abuse Act
Liability
Home Depot Agrees to Pay $17.5 Million in Multistate Settlement Following 2014 Data Breach
On November 24, 2020, a multistate coalition of Attorneys General announced that The Home Depot, Inc. agreed to pay $17.5 million and implement a series of data security practices in response to a data breach the company experienced in 2014.
Continue Reading Home Depot Agrees to Pay $17.5 Million in Multistate Settlement Following 2014 Data Breach
Ohio Law Provides Safe Harbor from Tort Claims Related to Data Breaches
On August 3, 2018, Ohio Ohio Governor John Kasich signed into law Senate Bill 220, which provides covered entities with an affirmative defense to tort claims, based on Ohio law or brought in an Ohio court, that alleges or relates to the failure to implement reasonable information security controls which resulted in a data breach. …
Continue Reading Ohio Law Provides Safe Harbor from Tort Claims Related to Data Breaches
Hunton Privacy and Insurance Leaders Address Prevention and Insurability of Cyber Attacks
Following Hunton & Williams’ November GC Cybersecurity Briefing, Securityroundtable.org published an article highlighting the vulnerabilities businesses face in a world of e-commerce and interconnectivity. …
Continue Reading Hunton Privacy and Insurance Leaders Address Prevention and Insurability of Cyber Attacks
Securing a Successful Transaction through Focused Privacy and Data Security Due Diligence
Privacy and data security issues have become the subject of critical focus in corporate mergers, acquisitions, divestitures and related transactions. Because of this heightened concern, it is imperative that companies conduct thorough due diligence about privacy and data security issues before entering into a transaction.
Continue Reading Securing a Successful Transaction through Focused Privacy and Data Security Due Diligence
Hunton Discusses Critical Cyber Coverage Selection Issues
Recently, Syed Ahmad, a partner with Hunton & Williams LLP’s insurance practice, and Eileen Garczynski, partner at insurance brokerage Ames & Gough, co-authored an article, Protecting Company Assets with Cyber Liability Insurance, in Mealey’s Data Privacy Law Report. This blog post contains a link to the full article. …
Continue Reading Hunton Discusses Critical Cyber Coverage Selection Issues
Hunton & Williams Launches M&A Privacy and Security Initiative
Hunton & Williams announces the formation of a cross-disciplinary legal team dedicated to guiding companies through the minefield of regulatory and cyber-related risks associated with high-stakes corporate mergers and acquisitions. …
Continue Reading Hunton & Williams Launches M&A Privacy and Security Initiative
FTC Issues Guide for Businesses on Handling Data Breaches
On October 25, 2016, the Federal Trade Commission released a guide for businesses on how to handle and respond to data breaches. The 16-page guide details steps businesses should take once they become aware of a potential breach. The guide also underscores the need for cyber-specific insurance to help offset potentially significant response costs.
Continue Reading FTC Issues Guide for Businesses on Handling Data Breaches
AIG Launches Cyber-BI and PD Policy
Insurance-giant American International Group announced that it will be the first insurer to offer standalone primary coverage for property damage, bodily injury, business interruption and product liability that results from cyber attacks and other cyber-related risks.
Continue Reading AIG Launches Cyber-BI and PD Policy
OCR Enters into First Enforcement Action Against Business Associate
On June 30, 2016, the U.S. Department of Health and Human Services’ Office for Civil Rights announced that it had settled potential HIPAA Security Rule violations with Catholic Health Care Services of the Archdiocese of Philadelphia. This is the first enforcement action OCR has taken against a business associate since the HIPAA Omnibus Rule was enacted in 2013.
Continue Reading OCR Enters into First Enforcement Action Against Business Associate