News Alerts and Breach Report for May 16, 2022

NIST Releases Cybersecurity Supply Chain Guidance The National Institute of Standards and Technology (NIST) released guidance on supply chain cybersecurity this week in response to the Biden administration’s Executive Order 14028—Improving the Nation’s Cybersecurity. The guidance, Software Supply Chain Security…

Read More
Interest

Interest Groups Exert Influence as Support Grows for Federal Privacy Law

As calls for comprehensive national privacy legislation grow louder in the United States, Big Tech and Big Business are deploying armies of lobbyists and monied interests to influence state and federal legislation. Legislators from both parties have rallied around the need for stronger consumer protection laws. This sentiment was echoed at a recent hearing held…
Read More
Payments

CNIL Publishes White Paper on Digital Payments and Data Privacy

The French Data Protection Authority’s white paper discusses how companies can comply with data privacy and security obligations. The use of card, contactless, and innovative digital payment solutions has significantly increased in recent years, fueled by the immediate impacts of the ongoing COVID-19 pandemic and the longer-term growth of e-commerce and open banking. In this…
Read More
California

California Passes Suite of New Privacy Laws

California continues to be at the vanguard of privacy protection. On October 11, 2021, California’s Governor Newsom signed several bills addressing privacy and data security. These new laws go into effect January 1, 2022 and include: AB 335, which adds an exemption to the California Consumer Privacy Act (CCPA) consumer personal information sales opt-out right.…
Read More

New York State Proposes Biometric Privacy Law

New York State legislators have proposed a private right to action with Assembly Bill 27–a proposed amendment to New York’s General Business Law (GBL). This amendment–also called the Biometric Privacy Act (BPA) –would allow consumers to sue companies for improperly collecting or using certain biometric data. Here’s our analysis: What Qualifies As Biometric Data? BPA…
Read More

2020 News in Review

Week Ending December 28 ICO Warns SolarWinds Victims to Report Breaches The United Kingdom’s Information Commissioner’s Office (ICO) has issued a warning to organizations compromised by the SolarWinds breach. The breach, which was carried out by Russian hackers, affected more than 18000 organizations worldwide. ICO requires UK data controllers subject to NIS regulations to report…
Read More
Consumer Data Protection

Should Consumers Have Full Control Over Their Data?

Balancing the risks and benefits of data has become part of everyday life–for individuals and businesses alike. While the “data explosion” has done wonders for personalization, it has also opened the doors to exploitation, discrimination and the invasion of privacy. When looking at data from a corporate governance perspective, it is easy to forget the…
Read More
Back To Top