Tag Archives: Personal Information

U.S.-EU Data Transfer Agreement for Law Enforcement Nearing Completion

On September 8, 2015, representatives from the U.S. Government and the European Commission initialed a draft agreement known as the Protection of Personal Information Relating to the Prevention, Investigation, Detection and Prosecution of Criminal Offenses, which is intended to govern the cross-border transfer of personal information for law enforcement purposes. … Continue Reading

ICO to Investigate Data Sharing for Marketing by UK Charities

On September 2, 2015, the Information Commissioner’s Office announced an investigation into the data sharing practices of charities in the United Kingdom. The announcement follows the publication of an article in a UK newspaper highlighting the data sharing and marketing practices of certain charities.… Continue Reading

Neiman Marcus Seeks En Banc Review

On August 3, 2015, Neiman Marcus requested en banc review of the Seventh Circuit’s recent decision in Remijas v. Neiman Marcus Group, LLC. The Seventh Circuit found that members of a putative class alleged sufficient facts to establish standing to sue Neiman Marcus following a 2013 data breach.… Continue Reading

Connecticut Passes New Data Protection Measures into Law

On July 1, 2015, Connecticut's governor signed into law Public Act No. 15-142, An Act Improving Data Security and Agency Effectiveness, that amends and updates the state's data breach notification law and imposes certain data security requirements on health insurers and state contractors.… Continue Reading

Data Security Act Introduced in New York State Assembly

On April 8, 2015, a New York Assemblyman introduced the Data Security Act in the New York State Assembly that would require New York businesses to implement and maintain information security safeguards. The Data Security Act also expands the scope of New York’s breach notification law.… Continue Reading

In an Irish First, the ODPC Holds Company Directors Personally Liable for Breach of the Irish Data Protection Acts

On October 6, 2014, the Irish Office of the Data Protection Commissioner (“ODPC”) announced its success in bringing prosecution proceedings against M.C.K Rentals Limited (“MCK”), a firm of private investigators, and its two directors, for breaches of the Irish Data Protection Acts 1998 and 2003. Specifically MCK and its directors were found to have (1) … Continue Reading

GAO Report Highlights Gaps in U.S. Privacy Laws

On November 15, 2013, the U.S. Government Accountability Office released a report finding that the current federal statutory privacy scheme contains "gaps" and "does not fully reflect" the Fair Information Practice Principles.… Continue Reading