InfoLawGroup Senior Counsel To Brief Risk Management Executives
By InfoLawGroup LLP on December 12, 2011
Do Not Track, Do Not Track W3C, FTC, W3C
W3C Publishes Draft "Do-Not-Track" Standards
By InfoLawGroup LLP on November 18, 2011
aggregation, data, Fourth Amendment, GPS, Jones, location, reasonable expectation of privacy, Supreme Court, surveillance
Location, Location, Location
By InfoLawGroup LLP on November 15, 2011
Tanya Forsheit recently appeared on Fox to discuss the Supreme Court's evaluation of GPS surveillance under the Fourth Amendment in US v. Jones. The case raises important issues regarding technology, aggregation of data, and privacy expectations with respect to location information.
advertising, marketing, Media, promotions, social networking
Google+ Pages Allow Linking, but Not Hosting Promotions
By Heather Nolan on November 14, 2011
advertising, events, Heather Nolan, Jamie Rubin, marketing, promotions
33rd Annual PMA Marketing Law Conference
By Heather Nolan on November 14, 2011
behavorial advertising, DAA, FTC, Harell, infolawroup, information law group, OBA, privacy
Digital Advertising Alliance Releases Principles for Multi-Site Data
By InfoLawGroup LLP on November 10, 2011
flash cookies, FTC Act, InfoLawGroup, information law group, privacy, privacy enforcement, scanscout, Section 5, Segalis
FTC Takes on Super Cookies
By InfoLawGroup LLP on November 09, 2011
Breach, cyber security, guidance, incident response, notification, SEC
"I'll Be Watching You"
By InfoLawGroup LLP on November 07, 2011
Boris, data, enforcement, Facebook, InfoLawGroup, information law group, National Labor Relations Act, National Labor Relations Board, NLRA, NLRB, privacy, protection, Segalis, social media, workplace privacy
NLRB Holds "Facebook" Firing Justified on Alternative Grounds, but Finds Policy Unlawful
By InfoLawGroup LLP on November 03, 2011
As we have discussed on our blog, the National Labor Relations Board (NLRB) has continued a campaign of enforcement actions against employers who, according to the NLRB, have unlawfully terminated employees for discussing working conditions on social media. As we reported, in the first of such "Facebook" enforcement actions to come before an NLRB administrative judge, the employer was ordered to reinstate five employees and to pay back their wages.On September 28, 2011, in the second "Facebook" case to reach an NLRB administrative judge, an employer was found to have been justified in terminating an employee car salesman for Facebook postings that mocked the employer and did not concern working conditions
ediscovery, New York State Bar Association, Richard Santalesa New York State Bar Association
NYSBA Releases E-Discovery Best Practices Guidelines
By InfoLawGroup LLP on November 01, 2011
Breach, cyber security, Navetta
Is Your Company Prepared for Cyber Risk?
By InfoLawGroup LLP on October 31, 2011
Cloud, contract, liability, outsourcing
David Navetta Talks About Service Provider Liability
By InfoLawGroup LLP on October 31, 2011
damages, data breach, Hannaford, motion to dismiss Hannaford data breach payment card PCI DSS, payment card, PCI DSS
Federal Appeals Court Holds Identity Theft Insurance/Credit Monitoring Costs Constitute "Damages" in Hannaford Breach Case
By InfoLawGroup LLP on October 24, 2011
In a significant development that could materially increase the liability risk associated with payment card security breaches (and personal data security breaches, in general), the U.S. Court of Appeals 1st Circuit (the "Court of Appeals") held that payment card replacement fees and identity theft insurance/credit monitoring costs are adequately alleged as mitigation damages for purposes of negligence and an implied breach of contract claim. The decision in Hannaford could be a game changer in terms of the legal risk environment related to personal data breaches, and especially payment card breaches where fraud has been perpetrated. In this post, we summarize the key issues and holdings of the Court of Appeals.
David Navetta Weighs in on Recent SEC Breach
By InfoLawGroup LLP on October 21, 2011
cloud computing, NIST, standards
Definition of Cloud Computing - NIST Releases Final SP 800-145
By InfoLawGroup LLP on October 21, 2011
Yesterday the National Institute of Standards and Technology announced "the final release of Special Publication 800-145, The NIST Definition of Cloud Computing." NIST's definition of Cloud Computing has been very influential in setting tent pegs in the ground to cabin the scope and discussion of the often nebulous definition of cloud computing.
Guidelines, InfoLawGroup, MMA, Mobile, policy, privacy, Privacy Policy
MMA Proposes Mobile Application Privacy Policy Framework
By Justine Young Gottshall on October 20, 2011
InfoLawGroup's Navetta and Friess Quoted on New SEC Cyber Risk Guidance
By InfoLawGroup LLP on October 18, 2011
Colorado, data privacy, Hearing, Info Law Group, InfoLawGroup, information law group, InformationLawGroup, Nicole Friess, personal information, privacy, privacy legislation, privacy rule, public utilities commission, smart grid, SmartGrid
Colorado PUC Holds Hearing on Smart Grid Privacy Rules
By InfoLawGroup LLP on October 18, 2011
Facebook, FTC, privacy, privacy notice, social media, social network, twitter
The Legal Implications of Social Networking Part Two: Privacy
By InfoLawGroup LLP on October 17, 2011
As social media and networking continue to revolutionize modern-day marketing and become the norm for organizations of all types, shapes and sizes, it is even more important to adequately address the legal risks associated with social media use. In Part One of our Legal Implications series, we laid out some background and identified key areas of legal risk. In the next few posts InfoLawGroup is going to look deeper at some of these risks. In this post we explore some of the privacy legal issues that companies should address if they want to leverage social media.
Breach, do, Heartland, notification, Regulation S-P, risk assessment, SEC, Security, security breach
SEC Issues Guidance Concerning Cyber Security Incident Disclosure
By InfoLawGroup LLP on October 14, 2011
Publicly traded businesses now have yet another set of guidelines to follow regarding security risks and incidents. On October 13, 2011 the Securities and Exchange Commission (SEC) Division of Corporation Finance released a guidance document that assists registrants in assessing what disclosures should be made in the face of cyber security risks and incidents. The guidance provides an overview of disclosure obligations under current securities laws - some of which, according to the guidance, may require a disclosure of cyber security risks and incidents in financial statements.