Those with experience working with the U.S. Federal Trade Commission (FTC) exchange any number of acronyms freely: CPB (Bureau of Consumer), DPIP (Division of Privacy and Identity Protection, part of the CPB), and, perhaps the
Continue Reading What’s a CID and What Happens If You Receive One from the FTC?
Regulatory
FCC Orders Far-Reaching New Privacy and Data Security Rules
As expected, the Federal Communications Commission (FCC) has handed down sweeping new privacy and security rules for Internet service providers (ISPs). On Thursday, October 27, 2016, a sharply divided commission voted to enact these new…
Continue Reading FCC Orders Far-Reaching New Privacy and Data Security Rules
Article 29 Working Party Issues Statement Following Adoption of EU-U.S. Privacy Shield
On July 26, 2016, the body of European Data Protection Authorities (DPAs)—the “Article 29 Working Party” (WP29)—issued a statement commending the improvements made to the EU-U.S. Privacy Shield (Privacy Shield). Although the WP29 continues to…
Continue Reading Article 29 Working Party Issues Statement Following Adoption of EU-U.S. Privacy Shield
The EU-U.S. Privacy Shield Is Adopted and Available as of August 1, 2016
On July 12, 2016, the EU Commission and the U.S. Secretary of Commerce announced the adoption of the EU-U.S. Privacy Shield (Privacy Shield). This announcement follows today’s adequacy decision by the College of EU Commissioners…
Continue Reading The EU-U.S. Privacy Shield Is Adopted and Available as of August 1, 2016
HHS Brings Landmark HIPAA Enforcement Action Against a Business Associate for Alleged Data Security Failures
On June 29, 2016, the U.S. Department of Health and Human Services (HHS) announced a Resolution Agreement with Catholic Health Care Services of the Archdiocese of Philadelphia (CHCS), settling charges that CHCS failed to comply…
Continue Reading HHS Brings Landmark HIPAA Enforcement Action Against a Business Associate for Alleged Data Security Failures
EU Cyber Security and Incident Notification Rules Enacted
On July 6, 2016, the European Parliament adopted the first-ever pan-European law on cyber security. The law, entitled the “Directive on the Security of Network and Information Systems” (NIS Directive), imposes security requirements and security…
Continue Reading EU Cyber Security and Incident Notification Rules Enacted