On November 14, 2022, Google LLC agreed to a $391.5 million settlement with the attorneys general of 40 U.S. states over the company’s location tracking controls available in its user account settings.
Continue Reading Google Agrees to $391.5 Million Settlement with 40 States over Misleading Location Tracking Practices
Texas
Texas AG Sues Google for Alleged Violations of State Biometric Privacy Law
Posted on
Posted in Information Security, U.S. State Law
On October 20, 2022, Texas Attorney General Ken Paxton brought suit against Google alleging various violations of Texas’s biometric privacy law, including that the company unlawfully collected and used the biometric data of millions of Texans without obtaining proper consent. …
Continue Reading Texas AG Sues Google for Alleged Violations of State Biometric Privacy Law
Texas Attorney General Investigates TikTok for Potential Child Privacy Violations and Facilitation of Human Trafficking
Posted on
On February 18, 2022, the Texas Attorney General’s Office announced it was investigating TikTok for alleged child privacy violations and facilitation of human trafficking on its platform.
Continue Reading Texas Attorney General Investigates TikTok for Potential Child Privacy Violations and Facilitation of Human Trafficking
Texas AG Sues Meta Over Collection and Use of Biometric Data
Posted on
On February 14, 2022, Texas Attorney General Ken Paxton brought suit against Meta over the company’s collection and use of biometric data. The suit alleges that Meta collected and used Texans’ facial geometry data in violation of the Texas Capture or Use of Biometric Identifier Act and the Texas Deceptive Trade Practices Act. …
Continue Reading Texas AG Sues Meta Over Collection and Use of Biometric Data
Texas Amends Breach Notification Law to Require Public Reporting of Breach Notices
Posted on
Posted in Security Breach, U.S. State Law
On June 14, 2021, Texas Governor Greg Abbott signed HB 3746, a bill amending Texas’s data breach notification law.
Continue Reading Texas Amends Breach Notification Law to Require Public Reporting of Breach Notices
FTC Announces Enforcement for Inadequate Third-Party Risk Management Practices Under the GLBA’s Safeguards Rule
Posted on
On December 15, 2020, the Federal Trade Commission announced a proposed settlement with Ascension Data & Analytics, LLC, a Texas-based mortgage industry data analytics company, to resolve allegations that the company failed to ensure one of its vendors was adequately securing personal information of mortgage holders.
Continue Reading FTC Announces Enforcement for Inadequate Third-Party Risk Management Practices Under the GLBA’s Safeguards Rule
Texas AG Investigates Facebook’s Use of Biometric Identifiers
Posted on
Posted in U.S. State Law
Texas Attorney General Ken Paxton is investigating Facebook for alleged violations of the Texas Business and Commercial Code, which contains provisions governing the collection, retention and disclosure of biometric data.
Continue Reading Texas AG Investigates Facebook’s Use of Biometric Identifiers
Texas Amends Data Breach Law; Now Requires Regulator Notification
Posted on
Texas Governor Greg Abbott recently signed into law HB 4390, which amends the state’s data breach notification law and creates an advisory council tasked with studying and developing recommendations regarding data privacy legislation.
Continue Reading Texas Amends Data Breach Law; Now Requires Regulator Notification
Washington Becomes Third State to Enact Biometric Privacy Law
Posted on
Posted in Information Security, U.S. State Law
On May 16, 2017, the Governor of the State of Washington, Jay Inslee, signed into law House Bill 1493, which sets forth requirements for businesses who collect and use biometric identifiers for commercial purposes. The law will become effective on July 23, 2017. Washington becomes the third state to pass legislation regulating the commercial use of biometric identifiers.
Continue Reading Washington Becomes Third State to Enact Biometric Privacy Law
OCR Fines Texas Health System For Alleged HIPAA Privacy Rule Violation
Posted on
Posted in Health Privacy, Information Security
On May 10, 2017, the U.S. Department of Health and Human Services’ Office for Civil Rights announced a 2.4 million dollar civil monetary penalty against Memorial Hermann Health System for alleged violations of the Health Insurance Portability and Accountability Act of 1996 Privacy Rule. …
Continue Reading OCR Fines Texas Health System For Alleged HIPAA Privacy Rule Violation