NY SHIELD, NIST, data security
NY SHIELD Act and the Bevy of State Privacy Legislation to Come: Are You Prepared?
By Mark Paulding & Tatyana Ruderman on November 16, 2020
data security, digital media, privacy
InfoLawGroup is hiring!
By InfoLawGroup LLP on May 14, 2015
app developers, app store, Apps, COPPA, data security, FTC, information security, mobile apps, privacy
Recent International Study Reports Delinquencies in App Privacy Disclosures
By InfoLawGroup LLP on September 15, 2014
app developers, app store, Apps, data security, Federal Trade Commission, FTC, mobile apps, mobile payments, privacy
Mobile Apps: FTC Says Vague Privacy Policies and Lack of Terms a Problem
By Jamie Rubin on August 04, 2014
Breach, breach notification, California, data protection, data security, heartbleed, HIPAA, hipaa hitech, OpenSSL, passwords, Security, vulnerability
FAQs Concerning the Legal Implications of the Heartbleed Vulnerability
By InfoLawGroup LLP on April 14, 2014
cybersecurity, cybersecurity framework, data protection, data security, hacking, InfoLawGroup, information security, information security program, Paulding, Red Flags Rule, Segalis, smart grid, white house order
Cybersecurity Effort Moves Forward – NIST Issues Final Critical Infrastructure Cybersecurity Framework
By InfoLawGroup LLP on February 18, 2014
Adherence Communications, Boris Segalis, data protection, Do Not Call Regulations, healthcare, HHS, HIPAA, HITECH, InfoLawGroup, OCR, PHR Portals, privacy, privacy enforcement, privacy rule, security rule
New HIPAA/HITECH Rules Implementation Roadmap: Countdown Begins to September 23, 2013 Compliance Deadline
By InfoLawGroup LLP on March 31, 2013
11th Circuit, causation, cognizable harm, damages, data breach, data security, Hannaford data breach payment card PCI DSS, identity the, motion to dismiss, motion to dismiss negligence security breach litigation standing injury-in-fact, negligence
Eleventh Circuit Rules "Damages" Properly Alleged in Data Breach-Identity Theft Lawsuit
By InfoLawGroup LLP on September 17, 2012
Boris Segalis, Breach, data security, FTC, information security program, Nihar Shah, NYSEG, privacy enforcement, PUC, SmartGrid, Utilities, vendor management
Data Breach at New York Utility Prompts Enforcement Action and Industry-Wide Data Security Review
By InfoLawGroup LLP on August 24, 2012
AB22, Boris Segalis, consumer credit report, credit report, EEOC, employee privacy, group, InfoLawGroup, information, Law, privacy law, Tanya Forsheit, workplace privacy
Restrictions on Use of Consumer Reports in Hiring Process Enacted in California
By InfoLawGroup LLP on October 10, 2011
On October 10, 2011, Governor Brown signed into law a bill, AB22, that restricts the use of consumer credit reports in the hiring and promotion process.
Blumethal, Breach, data security, InfoLawGroup, information law group, information security, Personal Data Protection and Breach Accountability Act, privacy, privacy legislation, Segalis
We Discuss Benefits of Federal Information Security Legislation on Fox
By InfoLawGroup LLP on September 14, 2011
Earlier this week we blogged about Senator Blumenthal's (D-CT) proposed Personal Data Protection and Breach Accountability Act of 2011. Today, InfoLawGroup partner Boris Segalis spoke on Fox Live about the advantages of federal information security legislation.
Boris Segalis, concerted activity, employee privacy, InfoLawGroup, information law group, NLRA, NLRB, privacy, privacy enforcement, Section 7, social media, social network
NLRB Report Reviews Social Media Enforcement Actions
By InfoLawGroup LLP on August 31, 2011
On August 18, 2011, the Associate General Counsel of the National Labor Relations Board ("NLRB" or the "Board") issued a report analyzing the Board's recent social media enforcement actions. The report seeks to provide guidance to employers that want to ensure that their social media policies appropriately balance employee rights and company interests.
access, Boris Segalis, Health Care, health information, HHS, HITECH, InfoLawGroup, information law group, InformationLawGroup, Nicole Friess, NPRM, privacy, privacy rule, protected health information, Regulation, Security, security rule
Changes to HIPAA Privacy Rule Proposed by HHS - Find Out Who Has Accessed Your Health Records
By InfoLawGroup LLP on June 01, 2011
BMW, Boris Segalis, employee privacy, enforcement, Facebook, InfoLawGroup, information law group, NLRA, NLRB, privacy, social media, workplace privacy
Facebook Firing III -- NLRB Strikes Twice in May!
By InfoLawGroup LLP on May 25, 2011
Boris Segalis, employee privacy, enforcement, Facebook, InfoLawGroup, information law group, NLRA, NLRB, privacy, social media, Workplace Privac
Another Facebook Firing Enforcement Action Brought by NLRB
By InfoLawGroup LLP on May 24, 2011
We previously reported on our blog that a Connecticut ambulance company settled the National Labor Relations Board's (NLRB's) allegations that the company violated an employee's federal rights by firing her for criticizing a manager on Facebook. The NLRB continues its enforcement blitz with another Facebook firing complaint.
Apple, Boris Segalis, data protection, Directive, DPA, EU Data Protection Directive, Google, InfoLawGroup, information law group, mobile privacy, privacy, privacy enforcement, WP29
Mobile Location Privacy Opinion Adopted by Europe's WP29
By InfoLawGroup LLP on May 19, 2011
On May 16, 2011, EU's Article 29 Working Party (WP29) adopted an opinion setting out privacy compliance guidance for mobile geolocation services.WP29 is comprised of representatives from the EU member states' data protection authorities (DPAs), the European Data Protection Supervisor and the European Commission. WP29's mandate includes (i) giving expert advice to the EU member states regarding the implementation of European data protection directives, and (ii) promoting uniform implementation of the directives in all EU state members as well as in Norway, Liechtenstein and Iceland. WP29's opinions, therefore, carry significant weight in the interpretation and enforcement of data protection laws by European DPAs.
Not surprisingly, WP29 has concluded that geolocation data is "personal data" subject to the protections of the European data protection framework, including the EU Data Protection Directive 95/46/EC. The Working Party also determined that the collection, use and other processing of geolocation data through mobile devices generally requires explicit, informed consent of the individual. Below are the highlights of the opinion.
Boris Segalis, data protection, data security, FIPPs, InfoLawGroup, information law group, Korea, personal information, Personal Information Protection Act, PIPA, privacy, privacy legislation
Personal Data Protections Expand in Korea
By InfoLawGroup LLP on May 18, 2011
Mr. Kwang Hyun Ryoo, a partner at the Korean law firm of Bae, Kim & Lee LLC, is reporting in the firm's newsletter that on March 29, 2011, Korea enacted a comprehensive personal data protection law, entitled Personal Information Protection Act (PIPA). Most of the act's provisions will come into force on September 30, 2011.
Boris Segalis, broker, data protection, dealer, financial privacy, InfoLawGroup, information law group, information security, Nicole Friess, privacy, privacy assessment, privacy enforcement, privacy rule, Regulation S-P, Regulation SP, Safeguards Rule, SEC, Securities and Exchange Commission
Federal Privacy Enforcement Update: SEC Fines Executives for Privacy and Security Violations
By InfoLawGroup LLP on April 13, 2011
As we have reported previously on our blog, federal agencies, including the FTC, NLRB and EEOC have been very active in taking action against privacy and information security violations. This trend continues with the Securities and Exchange Commission's (SEC's) recent announcement of a settlement with three former executives a brokerage firm (GunnAllen Financial, Inc.). The SEC alleged that the former executives violated the Commission's Privacy Rule and Safeguards Rule (Regulation S-P) and aided and abetted the firm in violating these rules. This enforcement action marks the first time the SEC assessed financial penalties against individuals charged solely with violating Regulation S-P.
Boris Segalis, Buzz, Consent Order, Consumer Protection, data protection, data security, Federal Trade Commission, FTC, FTC Act, Google, Google settlement, InfoLawGroup, information law group, information security, personal information, privacy, privacy assessment, privacy by design, privacy enforcement, risk assessment, Safe Harbor, social media, social network
FTC Takes a Big Step in Privacy Enforcement with Google Buzz Settlement
By InfoLawGroup LLP on April 06, 2011
The Google Buzz settlement that the Federal Trade Commission announced on March 30, 2011 is the latest in the line of the Commission's numerous Section 5 actions related to privacy and data security violations. The Google Buzz settlement, however, is unique in several important ways. The settlement represents (i) the first FTC settlement order has requires a company to implement a comprehensive privacy program to protect the privacy of consumers' information, and (ii) the Commission's first substantive U.S.-EU Safe Harbor framework enforcement action. Let's dive in (make sure to read the "Action Item" at the conclusion of the post!).
Boris Segalis, data protection, Electric Utility Data Protection Act, InfoLawGroup, information law group, InformationLawGroup, Oklahoma, personal information, privacy law, privacy legislation, smart grid, SmartGrid
Oklahoma State House Passes Smart Grid Privacy Bill
By InfoLawGroup LLP on March 23, 2011
On March 18, 2011, the Oklahoma State House passed the Electric Utility Data Protection Act (House Bill 1079). The state's Senate will consider the bill next.The Act seeks to establish standards to govern the use and disclosure of electric utility usage data (including personal information) by electric utilities, customers of electric utilities and third parties. The Act also requires electric utility companies to maintain the confidentiality of customer data and allow customers to access the data. State Rep. Scott Martin noted that customers will see energy savings from the Smart Grid, but are vulnerable to potential access of their data by third parties. "This legislation should ensure customers can reap the many benefits of this new system without having to fear someone getting access to their data without permission," said Martin. The legislation is said to have the support of the Oklahoma Gas & Electric Company, which has already converted 100,000 standard meters to smart meters in the state and plans to install 800,000 smart meters in the next two years.
