On November 25, 2022, Ireland’s Data Protection Commission released a decision fining Meta Platforms, Inc. €265 million for a 2019 data leak involving the personal information of approximately 533 million Facebook users worldwide.
Continue Reading Irish Data Protection Commission Fines Meta €265 Million for Privacy Violations
Penalty
UK Information Commissioner’s Office Fines Construction Company £4.4 Million for Breach of Security Obligations
Posted on
On October 24, 2022, the UK Information Commissioner’s Office issued a £4.4 million fine to Interserve Group Limited for failing to keep employee personal data secure, which violates Article 5(1)(f) and Article 32 of the GDPR, during the period of March 2019 to December 2020.
Continue Reading UK Information Commissioner’s Office Fines Construction Company £4.4 Million for Breach of Security Obligations
Texas AG Sues Google for Alleged Violations of State Biometric Privacy Law
Posted on
Posted in Information Security, U.S. State Law
On October 20, 2022, Texas Attorney General Ken Paxton brought suit against Google alleging various violations of Texas’s biometric privacy law, including that the company unlawfully collected and used the biometric data of millions of Texans without obtaining proper consent. …
Continue Reading Texas AG Sues Google for Alleged Violations of State Biometric Privacy Law
New York Legislature Considers New York Child Data Privacy and Protection Act
Posted on
On September 23, 2022, New York State Senator Andrew Gounardes introduced S9563, also known as the “New York Child Data Privacy and Protection Act.” …
Continue Reading New York Legislature Considers New York Child Data Privacy and Protection Act
CNIL Fines Clearview AI 20 Million Euros for Unlawful Use of Facial Recognition Technology
Posted on
On October 17, 2022, the French Data Protection Authority imposed a €20 million fine on Clearview AI for unlawful use of facial recognition technology.
Continue Reading CNIL Fines Clearview AI 20 Million Euros for Unlawful Use of Facial Recognition Technology
Former Uber Security Chief Found Guilty in Criminal Trial for Failure to Disclose Breach to FTC
Posted on
Posted in Information Security, Security Breach
On October 5, 2022, former Uber security chief Joe Sullivan was found guilty by a jury in U.S. federal court for his alleged failure to disclose a breach of Uber customer and driver data to the FTC in the midst of an ongoing FTC investigation. This case is significant because it represents the first time a company executive has faced criminal prosecution related to the handling of a data breach.
Continue Reading Former Uber Security Chief Found Guilty in Criminal Trial for Failure to Disclose Breach to FTC
FCC Proposes $3.4 Million in Fines for Violations of Children’s TV Programming Rules
Posted on
On September 21, 2022, the Federal Communications Commission announced a proposed combined fine of $3.4 million against Sinclair Broadcast Group, Nexstar Media Group and 19 other broadcast television licensees for violations of rules limiting commercial matter in children’s television programming.
Continue Reading FCC Proposes $3.4 Million in Fines for Violations of Children’s TV Programming Rules
SEC Fines Morgan Stanley $35 Million for Alleged Failure to Protect Customer Data
Posted on
Posted in Financial Privacy, Information Security
On September 20, 2022, the U.S. Securities and Exchange Commission announced that Morgan Stanley Smith Barney agreed to pay a $35 million fine for the firm’s alleged failure to adequately protect the personal information of approximately 15 million customers.
Continue Reading SEC Fines Morgan Stanley $35 Million for Alleged Failure to Protect Customer Data
Irish Data Protection Commissioner Fines Instagram for Children’s Privacy Violations
Posted on
On September 5, 2022, the Irish Data Protection Commissioner imposed a €405,000,000 fine on Instagram for violations of the EU General Data Protection Regulation’s rules on the processing of children’s personal data. …
Continue Reading Irish Data Protection Commissioner Fines Instagram for Children’s Privacy Violations
Wegmans Agrees to Pay $400,000 Penalty After Cloud Security Lapse
Posted on
On June 30, 2022, the New York Office of the Attorney General announced a $400,000 agreement with Wegmans Food Markets, Inc. in connection with a cloud storage security issue. …
Continue Reading Wegmans Agrees to Pay $400,000 Penalty After Cloud Security Lapse