access, Boris Segalis, Health Care, health information, HHS, HITECH, InfoLawGroup, information law group, InformationLawGroup, Nicole Friess, NPRM, privacy, privacy rule, protected health information, Regulation, Security, security rule
Changes to HIPAA Privacy Rule Proposed by HHS - Find Out Who Has Accessed Your Health Records
By InfoLawGroup LLP on June 01, 2011
BMW, Boris Segalis, employee privacy, enforcement, Facebook, InfoLawGroup, information law group, NLRA, NLRB, privacy, social media, workplace privacy
Facebook Firing III -- NLRB Strikes Twice in May!
By InfoLawGroup LLP on May 25, 2011
Boris Segalis, employee privacy, enforcement, Facebook, InfoLawGroup, information law group, NLRA, NLRB, privacy, social media, Workplace Privac
Another Facebook Firing Enforcement Action Brought by NLRB
By InfoLawGroup LLP on May 24, 2011
We previously reported on our blog that a Connecticut ambulance company settled the National Labor Relations Board's (NLRB's) allegations that the company violated an employee's federal rights by firing her for criticizing a manager on Facebook. The NLRB continues its enforcement blitz with another Facebook firing complaint.
and, bills-, by, capital, capitalists, data, data privacy laws and regulations, David, David Navetta, design, do, Do Not Track, Friess, FTC, group, InfoLawGroup, information, information law group, Law, laws, Navetta, Nicole, Nicole Friess, not, privacy, privacy bills, privacy by design, start-ups, track, tracking, VCs, venture, venture capital, venture capitalists
"Privacy by Design": A Key Concern for VCs and Start-Ups
By InfoLawGroup LLP on May 23, 2011
cloud computing, Guidelines, NIST, security measures
Third in our Cloud Computing Webinar Series
By InfoLawGroup LLP on May 20, 2011
In the next in our series of free webinars on cloud computing, Information Law Group Attorney Richard Santalesa examines implications arising from NIST's "Guidelines on Security and Privacy in Public Cloud Computing," with a focus on the legal considerations any team tasked with implementation of security best practices will need to grapple with.To register for this free one hour webinar on May 24 at 12pm ET, visit - http://bit.ly/kyRdku
Apple, Boris Segalis, data protection, Directive, DPA, EU Data Protection Directive, Google, InfoLawGroup, information law group, mobile privacy, privacy, privacy enforcement, WP29
Mobile Location Privacy Opinion Adopted by Europe's WP29
By InfoLawGroup LLP on May 19, 2011
On May 16, 2011, EU's Article 29 Working Party (WP29) adopted an opinion setting out privacy compliance guidance for mobile geolocation services.WP29 is comprised of representatives from the EU member states' data protection authorities (DPAs), the European Data Protection Supervisor and the European Commission. WP29's mandate includes (i) giving expert advice to the EU member states regarding the implementation of European data protection directives, and (ii) promoting uniform implementation of the directives in all EU state members as well as in Norway, Liechtenstein and Iceland. WP29's opinions, therefore, carry significant weight in the interpretation and enforcement of data protection laws by European DPAs.
Not surprisingly, WP29 has concluded that geolocation data is "personal data" subject to the protections of the European data protection framework, including the EU Data Protection Directive 95/46/EC. The Working Party also determined that the collection, use and other processing of geolocation data through mobile devices generally requires explicit, informed consent of the individual. Below are the highlights of the opinion.
Boris Segalis, data protection, data security, FIPPs, InfoLawGroup, information law group, Korea, personal information, Personal Information Protection Act, PIPA, privacy, privacy legislation
Personal Data Protections Expand in Korea
By InfoLawGroup LLP on May 18, 2011
Mr. Kwang Hyun Ryoo, a partner at the Korean law firm of Bae, Kim & Lee LLC, is reporting in the firm's newsletter that on March 29, 2011, Korea enacted a comprehensive personal data protection law, entitled Personal Information Protection Act (PIPA). Most of the act's provisions will come into force on September 30, 2011.
NIST, risk management, security measures
NIST Releases New DRAFT Cloud Computing Synopsis
By InfoLawGroup LLP on May 17, 2011
CFAA, employee privacy, InfoLawGroup, information law group, InformationLawGroup, Lee, PMSI, privacy litigation, social media, workplace privacy
District Ct. Holds Use of Facebook at Work Does Not Violate the CFAA
By InfoLawGroup LLP on May 16, 2011
cookies, data protection law, e-commerce, ePrivacy Directive, EU Data Protection Directive, EU Directive, European Union, privacy, privacy enforcement, privacy enhancing technologies, privacy notice, UK ICO, website
Cookie-Cutter: UK Announces New Rules for Website Cookies
By W. Scott Blackmer on May 13, 2011
The UK Information Commissioner's Office announces new rules for website cookies, which will normally require explicit user consent.
children's privacy, COPPA, data protection, FTC, InfoLawGroup, information law group, InformationLawGroup, Playdom, privacy, privacy enforcement, Section 5, unfair practices
FTC Enforcement Update: "Virtual Worlds" Operators Settle Children's Privacy Violation Charges; Pay $3M Fine
By InfoLawGroup LLP on May 12, 2011
On May 12, 2011, the Federal Trade Commission announced that the operators of 20 online virtual worlds have agreed to pay $3 million to settle charges that they violated the Children's Online Privacy Protection (COPPA) Rule by collecting and disclosing personal information from hundreds of thousands of children under age 13 without their parents' prior consent. The FTC noted that this settlement is the largest civil penalty for a violation of the FTC's COPPA Rule.
Ponemon Institute, Security
Ponemon Study: 73% Believe Cloud Providers Do Not Protect User's Confidential Information
By InfoLawGroup LLP on May 12, 2011
Apple, Apple Apps Commission DOJ Privacy mobile privacy FTC Franken Whitehouse Cobur..., Apps, Coburn, Commission, data protection, DOJ, Fox, Franken, FTC, Google, Hearing, InfoLawGroup, information law group, InformationLawGroup, Leahy, location, Mobile, mobile privacy, privacy, privacy by design, Privacy, Technology and the Law, Segalis, Senate, Senate Hearing, Senate Subcommittee, smartphone, Technology and the Law, tracking, Whitehouse
InfoLawGroup Speaks with Fox Live about Mobile Privacy
By InfoLawGroup LLP on May 12, 2011
On May 10, 2011, the Senate Subcommittee on Privacy, Technology and the Law held a hearing on mobile privacy. We covered the hearing in detail on our blog. Yesterday, InfoLawGroup partner Boris Segalis spoke with Fox Live's Tracy Byrnes about the balance between business and consumer interests that mobile privacy implicates.The clip from the interview is available on Fox at http://video.foxnews.com/v/4689248/the-congressional-mobile-privacy-hearing/?playlist_id=86861
Apple, Apps, Commission, data, Data Privacy Law or Regulation, Department, Department of Justice, Devices, DOJ, Federal, Federal Trade Commission, Franken, FTC, Google, group, Hearing, InfoLawGroup, information, information law group, InformationLawGroup, Justice, Law, Leahy, Legislation, location, location data, location tracking, Mobile, Mobile Devices, of, or, privacy, privacy legislation, Regulation, Senate, smartphones, tracking, Trade, wifi
Senate Subcommittee Holds Hearing on Mobile Privacy
By InfoLawGroup LLP on May 09, 2011
FOSS, Google, Linux, Patents
Bedrock v Google Patent Case - InfoLawGroup Analysis
By InfoLawGroup LLP on May 09, 2011
Ceridian, deceptive practices, enforcement, Federal Trade Commission, FTC, FTC Act, FTC consent, InfoLawGroup, information law group, information security, information security program, InformationLawGroup, Lookout, personal data, personal information, privacy enforcement, Section 5, Segalis
FTC Privacy Enforcement Update: Two Companies Allegedly Failed to Protect Sensitive Employee Data
By InfoLawGroup LLP on May 06, 2011
On May 3, 2011, the Federal Trade Commission announced that Ceridian Corporation and Lookout Services, Inc. agreed to settle the FTC's allegations that the companies failed to safeguard their business customers' employee personal information. Ceridian's services include payroll processing, payroll-related tax filing, benefits administration and other human resource services for business customers. Lookout provides a web-based computer product that is designed to help employers comply with their obligations under federal law to complete and maintain a U.S. Citizenship and Immigration Services Form I-9 about each employee in order to verify that the employee is eligible to work in the United States.
Fox News, iPhone, location, National Strategy for Trusted Identities in Cyberspace, NSTIC, privacy, smartphones, tracking
Recent News: Smartphones & Location Privacy, NSTIC, and More . . .
By InfoLawGroup LLP on April 27, 2011
Our readers may have noticed that there is a lot in the privacy news this week. On Monday, I appeared on FoxNews.com Live to discuss smartphones and location privacy. Yesterday, Dave appeared on Fox 31 Denver KDVR to discuss The National Strategy for Trusted Identities in Cyberspace (NSTIC). And new privacy and security law stories are breaking on a daily (sometimes hourly) basis. We will continue to watch these and other rapidly evolving issues and will post new developments here.
cloud computing, Cloud Users' Bill of Rights, contracting, David Navetta, webinar
Our "Contracting for Cloud Computing" Free Webinar Now Available On Demand
By InfoLawGroup LLP on April 20, 2011
Breach, damages, litigation, personal information, privacy, security breach litigation
California Federal Court Holds that Damages Properly Alleged in RockYou Data Breach Case
By InfoLawGroup LLP on April 19, 2011
In what may be a sign of an evolving judicial atmosphere and approach concerning data breach lawsuits, a Federal judge in the Northern District of California District Court recently refused to dismiss various causes of action related to a data breach involving RockYou. In particular, the Court explored the issue of whether the plaintiff sufficiently alleged "harm" arising out of the data breach. This blog post takes a look the highlights of the Court's decision.
Commercial Privacy Bill of Rights Act, Kerry, McCain, Nymity, privacy bill of rights
The Kerry-McCain Bill
By InfoLawGroup LLP on April 18, 2011
Dave, Scott and I recently spoke with Nymity about the Commercial Privacy Bill of Rights Act of 2011 introduced by Senators John Kerry (D-MA) and John McCain (R-AZ) last Tuesday. You can read the interview here. We provide a general summary of the bill and identify some of the key challenges organizations will face if the bill becomes law.
