Breach Notification Archives

SEC Proposes Additional Cybersecurity Disclosure Rule

March 21, 2022
Editorial Team
Breach Notification, Breach response, Cybersecurity, Governance, Policies and Procedures, SEC
0 Comments

On March 9, 2022, the Securities and Exchange Commission (SEC) issued a proposed rule on cybersecurity risk management, strategy, governance, and incident disclosure by public companies. The SEC will likely vote to finalize the rule before this summer. Proposed Rule…

FTC Makes Significant Changes to GLBA Safeguards Rule

November 3, 2021
Editorial Team
Breach Notification, Data Privacy, Federal Trade Commission (FTC), Financial Services, GLBA, Safeguards Rule

The FTC’s final rule released last week amending its Standards for Safeguarding Customer Information (Safeguards Rule) under the Gramm-Leach-Bliley Act (GLBA) will require significant changes in data security policies and procedures to be made by non-bank financial institutions covered by the Safeguards Rule. Such institutions include finance companies, mortgage companies and brokers, motor vehicle dealers,…

Become a member to access this content.

China’s Personal Information Protection Law: Key Takeaways

October 27, 2021
Editorial Team
Breach Notification, China, Cross-Border Data Transfers, Data Governance, Data Privacy, GDPR, Governance, Legislation, Penalties and Enforcement, Personal Information, PIPL

On August 20, 2021, China’s first comprehensive Personal Information Protection Law (“PIPL”) was passed into law. The Cybersecurity Law, the Data Security Law, and the PIPL of China are the three pillars of China’s data protection framework, which govern cybersecurity, data security, and personal information protection respectively. The Cybersecurity Law largely governs cybersecurity requirements for…

Become a member to access this content.

California Passes Suite of New Privacy Laws

October 26, 2021
Editorial Team
Biometric, Breach Notification, California, CCPA, Compliance, Data Privacy, Data Protection, Data Security, Genetic Information, Legislation

California continues to be at the vanguard of privacy protection. On October 11, 2021, California’s Governor Newsom signed several bills addressing privacy and data security. These new laws go into effect January 1, 2022 and include: AB 335, which adds an exemption to the California Consumer Privacy Act (CCPA) consumer personal information sales opt-out right.…

Become a member to access this content.

DOJ Will Use False Claims Act to Target Cybersecurity Fraud

October 15, 2021
Michael Reinhardt
Breach Notification, Breach response, Compliance, Cyber Fraud, Cybersecurity, Data Mapping and Inventory, Department of Justice, Government Contracting, Risk Management

On October 6, Deputy Attorney General Lisa Monaco announced the launch of the US Department of Justice’s (DOJ) Civil Cyber-Fraud Initiative. The DOJ will utilize the False Claims Act (FCA) to pursue cybersecurity related fraud by government contractors and grant recipients. The False Claims Act was enacted during the Civil War to stamp out fraud…

Become a member to access this content.

Attorney-Client Privilege in the Age of Cyber Breaches

October 8, 2021
Other Source
Attorney-Client Privilege, Breach Notification, Breach response, Data Breach

Investigations and forensic reports relating to a cybersecurity breach may not always be protected by the attorney-client privilege or work product protection. Companies seeking such reports after a data breach must take caution to protect them from a possible waiver of privilege in the event of subsequent litigation relating to a data breach. The following…

Become a member to access this content.

UK Proposes Reforms to Data Protection Laws

September 22, 2021
Editorial Team
Artificial Intelligence, Breach Notification, Cookies, Data Privacy, Data Protection, Data Sharing, GDPR, Governance, United Kingdom

On 10 September 2021, the UK Government’s Department for Digital, Culture, Media, and Sport (DCMS) published its long-awaited proposals for reform of the country’s data protection laws. The consultation paper includes a detailed and comprehensive set of suggested amendments to the UK GDPR, Data Protection Act 2018, and Privacy and Electronic Communications Regulations (PECR), with…

Become a member to access this content.

The Impact of Data Security Incident Trends on Commercial Transactions

September 17, 2021
Editorial Team
Breach Notification, Breach prevention, Breach response, Compliance, Consumer Privacy, Cybersecurity, Data Protection, Data Security, Privacy, Ransomware, US Regulatory

The 2021 edition of BakerHostetler’s annual Data Security Incident Response Report – a report based on the firm’s experience with data security incident response and litigation over the past year – features a number of important insights previously covered on this blog including trends in global breach notification, healthcare industry risks and ransomware. The Report…

Become a member to access this content.

How Cybersecurity Frameworks Can Protect Your Organization (Even in the Event of a Breach)

September 10, 2021
Editorial Team
Breach Notification, Breach prevention, Breach response, Compliance, Consumer Privacy, Cybersecurity, Data Privacy, Data Protection, Federal Trade Commission (FTC), NIST, Penalties and Enforcement, Privacy, State Laws

It’s certainly no secret how damaging data breaches can be for organizations today. And if lost revenue and a tarnished reputation aren’t enough to make you want to act, your organization could face punitive damages if you fail to protect your customers’ private information. Yes, that’s right—steep fines imposed by regulatory agencies can await those…

Become a member to access this content.

SEC Doubles Down on Safeguards Rule Enforcement

September 9, 2021
Tim Crino
Banks, Breach Notification, Breach prevention, Breach response, Broker Dealers, Compliance, Cybersecurity, SEC

The Securities and Exchange Commission issued sanctions against three financial services companies last week. The sanctions came in response to a series of email-takeover attacks in which Personally Identifiable Information (PII) was exposed. In each case, the SEC found that the firms failed to implement proper cybersecurity measures against breaches. Each firm was found responsible…

Become a member to access this content.

Page 1
Page 2
Next