Businesses’ responses to the COVID-19 health crisis, and in particular the increased demands for personnel to work remotely, present increased security risks and considerations.
As companies develop policies and procedures to respond to the COVID-19 outbreak, company leadership would do well to consider the limitations and prohibitions on the processing of employee information under federal and state privacy laws, as well as those in any internal company policies.
On February 7, 2020, California’s Office of the Attorney General (CalAG) released modified California Consumer Privacy Act (CCPA) draft regulations, revising the initial draft regulations released in October 2019.
In new alerts, both state and federal regulators are cautioning the financial services industry about heightened cybersecurity risk amid a climate of increased geopolitical tensions.
On January 14, a new version of the proposed Washington Privacy Act, Senate Bill 6281, was introduced in the state Senate.
In the latest Congressional effort to establish a federal privacy law, on November 18, 2019, a group of Senators released a set of “core principles” for a federal privacy framework.
As part of its review of the Children’s Online Privacy Protection Act (COPPA) Rule, the Federal Trade Commission (FTC) held a public workshop to discuss possible updates.
September 13, 2019 marked the last day of California’s 2019 legislative session and, importantly, the last call for any 2019 amendments to the landmark California Consumer Privacy Act (CCPA).
Credit reporting companies would be subject to supervision and examination authority by the Consumer Financial Protection Bureau (CFPB) and would be barred from using Social Security numbers, under new legislation proposed by Rep. Patrick McHenry (R-N.C.).
The U.K. Information Commissioner’s Office (ICO) announced headline grabbing proposed fines against British Airways and Marriott International, Inc. for alleged violations of the EU’s General Data Protection Regulation (GDPR).