Insights on Info Law Group,privacy enforcement

Big Data, Brill, DNT, Do Not Track, FCRA, FTC, Nihar Shah, OBA, privacy, privacy enforcement, Segalis, targeting, tracking

FTC Looks to Link Do-Not-Track, Big Data Privacy Concerns; Seeks Solutions

By InfoLawGroup LLP on March 15, 2012

Nowadays, a news story on privacy is out of place if it doesn't mention Do-Not-Track (known as "DNT") or Big Data. While these hot topics represent key concerns for privacy professionals, advocates and regulators, there is no clear agreement on what they mean or how to address the privacy issues they raise. In this post, we consider recent developments on these topics, including how the Federal Trade Commission has sought to focus on and connect these new issues.DNT or DNC DNT is in the midst of a multi-faceted identity crisis, starting with a disagreement over the definition of DNT. Self-regulatory organizations and the advertising industry assert that DNT stands for "Do Not Target," referring to the use of consumer data for the purposes of targeted advertising. The FTC, buoyed by privacy advocates, appears to take the view that DNT means not only "Do Not Target" but also "Do Not Collect" (DNC). FTC Commissioner Brill elaborated at the 2012 IAPP Summit that she doesn't view the current DNT efforts as entirely sufficient because the choice DNT offers does not give consumers appropriate protection against what Brill characterized as "limitless, unmitigated" data collection. But Brill does not argue for wholesale implementation of DNC, and has indicated that the details of the implementation of DNT/DNC will continue to remain a key focus for the FTC.

Buzz, consent, EPIC, FTC, FTC Act, Google, InfoLawGroup, information law group, privacy, privacy enforcement, Privacy Policy, Section 5, Segalis

EPIC Alleges Epic FTC Fail In Google Saga; We Review the Complaint

By InfoLawGroup LLP on February 13, 2012

On February 8, 2012, the Electronic Privacy Information Center (EPIC) asked the Federal District Court for the District of Columbia to compel the Federal Trade Commission (FTC) to enforce the terms of the agency's Google Buzz privacy settlement with Google. EPIC seeks to compel the FTC to stop Google's planned consolidation of user data from across the company's services into a single profile for each user under a single privacy policy. EPIC has alleged that the proposed changes and the way Google seeks to implement the changes violate the Google Buzz consent order. The District Court will hear the case before March 1, 2012.In this post, we discuss the highlights of EPIC's complaint, Google's response and lessons learned.

Boris, Breach, data breach, data protection, enforcement, InfoLawGroup, information law group, information security breach, Megafon, privacy, privacy enforcement, Russia, Segalis, Yandex

Russia Data Protection Enforcement Update - Administrative Charges Follow Breach

By InfoLawGroup LLP on September 01, 2011

It is being reported that Moscow prosecutors conducted an investigation into whether several websites that were involved in data breaches earlier this year violated the country's data protection law. As a result of the breaches, names, contact information and order histories of Internet magazine subscribers (including adult-themed publications) became available on Internet search engines, including Russian-language Yandex. Without naming the websites, the report states that the prosecutors have filed administrative charges against two Internet magazines as a result of the investigation.

Boris Segalis, concerted activity, employee privacy, InfoLawGroup, information law group, NLRA, NLRB, privacy, privacy enforcement, Section 7, social media, social network

NLRB Report Reviews Social Media Enforcement Actions

By InfoLawGroup LLP on August 31, 2011

On August 18, 2011, the Associate General Counsel of the National Labor Relations Board ("NLRB" or the "Board") issued a report analyzing the Board's recent social media enforcement actions. The report seeks to provide guidance to employers that want to ensure that their social media policies appropriately balance employee rights and company interests.

Dodd-Frank, Heather Nolan, Info Law Group, InfoLawGroup, information law group, InformationLawGroup, Prize and Gift Acts, social media, social networking, Unfair and Deceptive Acts or Practices Acts

Financial Industry Gets New Guidance on the Use of Social Media

By Heather Nolan on July 28, 2011

Banks and other financial institutions face unique issues when it comes to the use of social media. Faced with conflicts between social media platform rules, customer expectations, self-regulatory standards, and the strict regulations that govern the industry, guidance has been needed. The industry received some of that guidance recently through a whitepaper issued by BITS, the technology arm of The Financial Services Roundtable whose members are 100 of the largest financial institutions in the U.S.The report addresses the compliance, legal, operational, and reputational risks - and related mitigation strategies - of using social media in connection with a financial or banking operation. Regarding compliance, the report discusses the myriad of compliance areas relevant to banks, including marketing, privacy and security. For example, because social media web sites and web activities are deemed advertising by regulators, the report warns of the risks of failing to comply with various marketing laws and regulations applicable to the banking industry, including state Unfair and Deceptive Acts or Practices Acts and Prize and Gift Acts, as well as others that require additional steps for financial institutions, such as Truth in Lending, Truth in Savings, and FDIC membership rules. The paper predicts even stronger and more subjective requirements to come under the Dodd-Frank Wall Street Reform and Consumer Protection Act. Risks of non-compliance vary widely - from litigation and reputation risk, regulatory enforcement actions and in some cases civil money penalties.

consent, data protection, InfoLawGroup, information law group, information security, Legislation, privacy enforcement, Russia, Segalis

Russia Amends Federal Data Protection Law; Privacy Enforcement on the Rise

By InfoLawGroup LLP on July 19, 2011

Last week, the upper house of Russia's federal legislature approved amendments to the country's federal data protection law. The amendments impose detailed information security requirements on businesses that process personal data and revise some of the statute's data subject consent provisions.The amended law will come into force when it is published in the official newsletter.