Newsletters

11.11.21

OFAC Speaks Again on Ransomware: Mature Cybersecurity Programs Are Important

As employees clicked away at home amid the COVID-19 pandemic lockdown, ransomware attacks surged.


11.04.21

Beyond Big Tech: CFPB’s Payments Data Obsession May Broadly Target Third-Party Data Purchasers

In late October, the Consumer Financial Protection Bureau (CFPB) sent a shot across the bow at Big Tech’s use of consumer payments data.


07.20.21

An Update on Discovery in U.S. Litigation of Information Subject to International Privacy Laws

This month, Colorado became the third U.S. state to enact a comprehensive cross-industry privacy law.


07.08.21

Colorado’s Consumer Data Protection Act Has Passed: What’s in It?

On June 8, 2021, the Colorado Senate passed SB21-190, the Colorado Privacy Act (CPA), as amended by the Colorado House of Representatives.


06.08.21

Nevada Expands Do-Not-Sell Right to Cover Data Brokers

On June 2, 2021, Nevada Governor Steve Sisolak signed SB260, which expands Nevada consumers’ right to opt out of the sale of personal data to include data brokers in addition to website owners.


05.07.21

Does the Computer Fraud and Abuse Act Reach Cloud-Based Services and Systems?

In today’s data-driven world, the 1980s-era Computer Fraud and Abuse Act (CFAA) continues to be an important legal tool in a company’s toolbox, alongside technical and procedural controls, to protect itself and its electronic infrastructure from unauthorized users and theft.


03.03.21

Virginia’s Consumer Data Protection Act Has Passed: What’s in It?

Yesterday evening, Virginia Governor Ralph Northam signed the Consumer Data Protection Act (CDPA), making Virginia the latest state to enact a cross-industry privacy rights law.


02.09.21

Considerations in Machine Learning-Led Programmatic Underwriting

Underwriting is critical to insurance profits: Identify, qualify, and quantify the risk that an insurance policy covers and set the premiums across a pool of the policies to cover the risk.


01.27.21

It’s Not COPPA-cated: CARU Determines VSCO Mobile App Not Directed Toward Children

On January 21, the Children’s Advertising Review Unit announced a social media and photo editor app that has become well known to teens and tweens for the “VSCO girl” trend is not an online service that is either primarily or secondarily directed toward children as defined by the ...


12.16.20

Significant Changes to the HIPAA Regulations Proposed

On December 10, 2020, the U.S. Department of Health and Human Services (HHS), Office of Civil Rights (OCR) announced its proposal to make significant changes to the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule as part of its Regulatory Spring to Coordinated Care.