The New York Department of Financial Services has issued a Cyber Fraud Alert to regulated entities in light of a growing campaign to steal Nonpublic Information, as defined under New York law, from public-facing websites that provide instant quotes for products like auto insurance.
Continue Reading NY Department of Financial Services Issues Cyber Fraud Alert to Regulated Entities Using Instant Quote Websites

On February 10, 2021, the European Data Protection Supervisor published two opinions on the European Commission’s proposals for a Digital Services Act and a Digital Markets Act. The two proposals are part of a set of measures announced in the 2020 European Strategy for Data and have two main goals: (1) creating a safer digital space in which the fundamental rights of all users of digital services are protected, and (2) establishing a level playing field to foster innovation, growth and competitiveness in the European Single Market and globally.
Continue Reading EDPS Publishes Opinion on Digital Services Act and Digital Markets Act

On February 21, 2020, the Presidency of the Council of the European Union published a revised part of the proposed Regulation concerning the Respect for Private Life and the Protection of Personal Data in Electronic Communications and Repealing Directive.
Continue Reading EU Council Presidency Releases Proposed Amendments to Draft ePrivacy Regulation

On February 1, 2020, the Italian Data Protection Authority announced that it had levied a fine of 27.8 Million Euros on TIM S.p.A., a telecommunications company, for several unlawful marketing data processing practices.
Continue Reading Italian Garante Fines Telecom Company 27.8 Million Euros for Unlawful Marketing Practices

Recently, Iowa and Nebraska enacted information security laws applicable to personal information. Iowa’s law applies to operators of online services directed at and used by students in kindergarten through grade 12, whereas Nebraska’s law applies to all businesses doing business in Nebraska who own or license Nebraska residents’ personal information.
Continue Reading Iowa and Nebraska Enact Information Security Laws

On July 27, 2017, the French Data Protection Authority imposed a fine of 40,000 euros on a French affiliate of the rental car company, The Hertz Corporation, for failure to ensure the security of website users’ personal data.
Continue Reading CNIL Fines Rental Car Company for Data Security Failure Attributable to Third-Party Service Provider