On January 7, 2022, U.S. Representatives Kathy Castor (D-Fla.) and Jan Schakowsky (D-IL), members of the House Committee on Energy and Commerce, penned a letter requesting information from each of the Children’s Online Privacy Protection Act Safe Harbor programs.
Continue Reading U.S. Representatives Request Information from COPPA Safe Harbor Programs
United States
Russian Federal Security Service Reportedly Detains Members of REvil Ransomware Group
Posted on
Posted in Cybersecurity, U.S. Federal Law
On January 14, 2022, the Russian Federal Security Service detained members of the REvil ransomware group at the request of the United States, according to public press reports.
…
Continue Reading Russian Federal Security Service Reportedly Detains Members of REvil Ransomware Group
CISA Issues New Cybersecurity Directive for Federal Agencies
Posted on
Posted in Cybersecurity, U.S. Federal Law
On November 3, 2021, the Cybersecurity and Infrastructure Security Agency announced Directive 22-01 – Reducing the Significant Risk of Known Exploited Vulnerabilities, establishing a CISA-managed catalog of vulnerabilities and ordering federal agencies to remediate such vulnerabilities on government information systems. …
Continue Reading CISA Issues New Cybersecurity Directive for Federal Agencies
CFPB Orders Six Tech Companies to Provide Information on Payment Systems Data Practices
Posted on
Posted in Financial Privacy, Information Security
On October 21, 2021, the Consumer Financial Protection Bureau issued orders to Google, Apple, Facebook, Amazon, Square and PayPal requesting detailed information about their business practices in relation to payment systems they operate.
Continue Reading CFPB Orders Six Tech Companies to Provide Information on Payment Systems Data Practices
DOJ Announces New Cyber-Fraud Initiative and Intent to Utilize False Claims Act to Spur Compliance
Posted on
Posted in Cybersecurity, U.S. Federal Law
On October 6, 2021, Deputy Attorney General Lisa Monaco announced the launch of the new Civil Cyber-Fraud Initiative that will use the False Claims Act to pursue cybersecurity related fraud by government contractors and grant recipients. …
Continue Reading DOJ Announces New Cyber-Fraud Initiative and Intent to Utilize False Claims Act to Spur Compliance
FTC to Hold Virtual Open Meeting on October 21, 2021, on Findings From Agency’s 6(b) Orders to ISPs
Posted on
Posted in Events
The Chair of the Federal Trade Commission, Lina M. Khan, announced that the FTC will hold a virtual open meeting on Thursday, October 21, 2021, at 1pm ET to present some findings from evidence gathered pursuant to the 2019 6(b) orders issued to six Internet Service Providers and three of their advertising affiliates regarding the parties’ privacy practices.
Continue Reading FTC to Hold Virtual Open Meeting on October 21, 2021, on Findings From Agency’s 6(b) Orders to ISPs
Democratic Lawmakers Urge FTC to Hold Companies Accountable to their Children’s Privacy Notices
Posted on
Posted in Children’s Privacy, U.S. Federal Law
On October 8, 2021, Senator Ed Markey (D-Mass) and Representatives Kathy Castor (D-Fla) and Lori Trahan (D-Mass) penned a letter to Chair of the Federal Trade Commission Lina Khan, urging the agency to ensure that companies uphold the commitments made in their children’s privacy notices and “hold them accountable if they fail to do so.”…
Continue Reading Democratic Lawmakers Urge FTC to Hold Companies Accountable to their Children’s Privacy Notices
U.S. Senators Introduce Bipartisan Bill on Reporting Critical Infrastructure Cyber Incidents and Ransomware Payments
Posted on
On September 28, 2021, Senators Gary Peters and Rob Portman, respectively Chairman and Ranking Member of the Homeland Security and Government Affairs Committee, introduced a bipartisan bill that would require owners and operators of critical infrastructure to notify the Director of the Cybersecurity and Infrastructure Security Agency within 72 hours of having a reasonable belief that a covered cyber incident has occurred.
Continue Reading U.S. Senators Introduce Bipartisan Bill on Reporting Critical Infrastructure Cyber Incidents and Ransomware Payments
OCR Guidance Regarding HIPAA’s Applicability to COVID-19 Vaccination Information
Posted on
On September 30, 2021, the U.S. Department of Health and Human Services’ Office for Civil Rights issued guidance regarding when the HIPAA Privacy Rule applies to disclosures and requests for information about a person’s COVID-19 vaccination status. The guidance addresses common workplace scenarios and answers questions about whether and how the HIPAA Privacy Rule applies.
Continue Reading OCR Guidance Regarding HIPAA’s Applicability to COVID-19 Vaccination Information
DHS Issues Cybersecurity Guidance for Critical Infrastructure Firms
Posted on
Posted in Cybersecurity, U.S. Federal Law
On September 22, 2021, Secretary of Homeland Security Alejandro N. Mayorkas and Secretary of Commerce Gina Raimondo released a joint statement on the Department of Homeland Security’s issuance of preliminary Critical Infrastructure Control Systems Cybersecurity Performance Goals and Objectives. The Preliminary Goals identify nine overarching control system cybersecurity performance goals, each containing specific objectives to support the deployment and operation of secure control systems.
Continue Reading DHS Issues Cybersecurity Guidance for Critical Infrastructure Firms