As reported on our Hunton Retail Law Resource blog, on January 7, 2020, the Federal Trade Commission announced a settlement with Mortgage Solutions FCS, Inc., and its sole principal, Ramon Walker, to resolve allegations that the lender violated the FTC Act, the Fair Credit Reporting Act and the Gramm-Leach-Bliley Act, by improperly disseminating consumers’ personal information on Yelp in response to consumers’ negative reviews posted to that site.
Continue Reading
Personal Information
South Korean Court Imposes Personal Liability on Privacy Officer for Data Breach
Posted on
Posted in Enforcement, International
According to MLex, on January 6, 2020, the Seoul Eastern District Court found Kim Jin-Hwan, a privacy officer of the South Korean travel agency Hana Tour Service Inc., guilty of negligence in failing to prevent a 2017 data breach that affected over 465,000 customers of the agency and 29,000 Hana Tour employees.…
Continue Reading
Department of Education and Department of Health and Human Services Release First Update to Joint Guidance on FERPA and HIPAA Since 2008
Posted on
Posted in U.S. Federal Law
The U.S. Department of Education and the U.S. Department of Health and Human Services released joint guidance on the application of the Family Educational Rights and Privacy Act and the Health Insurance Portability and Accountability Act of 1996 Privacy Rule to student records.…
Continue Reading
China Issues Updated Draft Amendments to Information Security Technology Specification
Posted on
Posted in Information Security, International
On October 22, 2019, the drafting group of China’s National Information Security Standardization Technology Committee released a third draft amendment to the Information Security Technology – Personal Information Security Specification.…
Continue Reading
Facebook Reaches Settlement with ICO over £500,000 Data Protection Fine
Posted on
Facebook reached a settlement with the UK Information Commissioner’s Office, agreeing to pay a fine of 500,000 GBP in relation to the processing and sharing of its users’ personal data with Cambridge Analytica.…
Continue Reading
California Amends Breach Notification Law
Posted on
On October 11, 2019, California Governor Gavin Newsom signed into law AB 1130, which expands the types of personal information covered by California’s breach notification law.…
Continue Reading
China Issues Provisions on Cyber Protection of Children’s Personal Information
Posted on
On October 1, 2019, China’s Provisions on Cyber Protection of Children’s Personal Information becomes effective and are the first rules focused on children’s personal information protection in China.…
Continue Reading
CIPL Submits Comments to Canadian Government’s Proposals to Modernize PIPEDA
Posted on
On September 27, 2019, the Centre for Information Policy Leadership at Hunton Andrews Kurth LLP submitted comments on Innovation, Science and Economic Development Canada’s Proposals to Modernize the Personal Information Protection and Electronic Documents Act (“PIPEDA”) (the “Comments”).
…
Continue Reading
Majority of CCPA Amendment Bills Passed by California Legislature
Posted on
California marked the end of the 2019 legislative session this past Friday, September 13, by passing five out of six pending bills to amend the California Consumer Privacy Act of 2018. This blog entry provides a summary on the bills.…
Continue Reading
Maryland Insurance Administration Announces New Breach Notification Requirements
Posted on
Posted in Security Breach, U.S. State Law
On August 29, 2019, the Maryland Insurance Administration issued new breach notification requirements for entities that provide health insurance or related services. The new requirements will apply to insurers, non-profit health plans, HMOs, third-party administrators, and certain other managed care entities. The new rules will take effect on October 1, 2019.
…
Continue Reading