As we see the summer months of 2023 draw to a close, one cannot help but notice the significant events making headlines in relation to privacy laws, particularly in the United States. The events in question are to varied scales and magnitudes— ranging from statewide legislation in Oregon to federal agency action by the Securities…
Highly esteemed legal professionals, it is imperative to stay up-to-date with legal updates impacting privacy, security, and data protection especially as these matters continuously evolve. And so, I bring forth a summary of the recent happenings at Blank Rome LLP’s privacy, security, and data protection practice. As many of you may already be aware, Blank…
On July 18, 2023, Oregon Governor Tina Kotek signed the Oregon Consumer Privacy Act (SB 619) (“OCPA”) into law, marking Oregon as the eleventh state to enact a comprehensive state privacy law. This law is set to be enforced from July 1, 2024. However, for covered non-profits, the implementation deadline will be extended to July…
In the rapidly advancing digital age, mobile devices have propelled themselves to become an indispensable aspect of our business and personal lives. More so, they now hold a key role in areas such as legal hold, corporate governance, and internal or government investigations. The EDRM – Electronic Discovery Reference Model discusses the untold potential of…
The global discourse on the age verification measures for internet users has not subsided, with the governments of several countries favoring this approach in an attempt to control and protect online engagement. However, a spate of recently introduced age verification bills has run afoul of 1st Amendment rights, leading to these bills being deemed unconstitutional,…
In a significant move towards data privacy, Delaware has become the twelfth state to enact major consumer privacy legislation. Governor John Carney has recently approved the Personal Data Privacy Act (PDPA), according to a narrative from Fisher Phillips on JD Supra. It is the seventh state to pass such legislation in 2023 alone, a clear…
In a crucial development, 20 of the nation’s AI industry leaders declared that government regulation plays an important role in regulating AI during the first Senate AI Forum. This was in response to a query raised by Senator Chuck Schumer during the meeting, which was attended by over 60 Senators. This notable agreement marks a…
Global firms with a presence in Asia-Pacific countries are set to grapple with a new layer of technical complexity regarding cross-border e-discovery. On September 27th, 1:00 pm – 2:00 pm EDT, a webinar will highlight the challenges unique to this region, particularly with regards to Chinese, Japanese, and Korean language data sets and cross-border privacy…
On August 16, 2023, the Canadian government announced it was seeking comments regarding a proposed code of practice for generative artificial intelligence (AI) systems. The announcement reveals an ongoing effort from the Canadian authorities to ensure a clear and rigorous framework while projecting a robust regulatory system through the introduced code. The central function of…
The California Privacy Protection Agency (CPPA), the regulatory body responsible for enforcing the California Consumer Privacy Act (CCPA), has recently issued draft regulations concerning risk assessments and cybersecurity audits. This was announced preceding a public board meeting dedicated to discussing these topics among others, as reported by Sheppard Mullin Richter & Hampton LLP. This development…
TikTok, the highly popular Chinese-owned social media platform, was recently handed a hefty fine by the Irish data protection authority. This €345 million penalty pertains to the company’s processing of personal data related to younger users. It also ranks as the fifth-largest fine ever dealt since the EU incorporated new privacy laws in 2018. The…
In a recent legal development, a federal judge in Connecticut has ruled that a state law demanding convicted sex offenders to reveal their online identities to authorities cannot be applied against a former attorney who had filed a lawsuit against the state and law enforcement officials post his 2018 arrest. This report explores the noteworthy…
European and American corporations are bracing for a new era of data privacy standards, following the unveiling of the EU-US Data Privacy Framework. This latest development has gained considerable traction in legal circles, as it attempts to fill the significant regulatory gap left by the annulment of its predecessor, the Privacy Shield. As detailed by…
It appears that Caesars Entertainment may soon join a growing list of high-profile companies targeted by cyberattacks. In the wake of the substantial digital security breaches that hit MGM Entertainment, whispers have started to circulate concerning a potentially similar assault on Caesars Entertainment. These speculations, shared by two individuals close to the case, suggest that…
On August 29, 2023, the California Privacy Protection Agency (“CPPA”) disclosed a series of draft regulations related to cybersecurity audits and risk assessments. This represents the second part of a two-part series of regulations, with the first part detailing the Cybersecurity Audit Regulations. The present article focuses on the Draft Risk Assessment Regulations. The CPPA,…
SouthCoast Medical Group, LLC, also known as SouthCoast Health or simply SouthCoast, recently filed a notice of data breach with the U.S. Department of Health and Human Services Office for Civil Rights. The filing took place on August 17, 2023, after SouthCoast discovered that an unauthorized party had downloaded certain files from the company’s computer…
In an attempt to curb cybersecurity threats faced by health care organizations, a new federal agency is launching an initiative to bolster the security tools safeguarding the U.S health care system. A key task of this endeavor will be ensuring the continuity of care in the wake of cyberattacks. Continue Reading Experts Rebecca Schaefer and…
Delaware has become the 13th state to join the growing roster of jurisdictions in the United States that have enacted legislation protecting consumer privacy rights. Governor John Carney signed the Delaware Personal Data Privacy Act (DPDPA) into law on September 11, 2023, marking another important milestone in the evolution of privacy law in the U.S….
In a significant development for consumer data protection in the United States, the Delaware Personal Data Privacy Act (DPDPA) became law on September 11, 2023. This adds Delaware to the growing list of states that have enacted comprehensive consumer data privacy laws, which now includes California, Virginia, Colorado, Connecticut, Utah, Iowa, Indiana, Tennessee, Montana, Florida,…
Following some postponement, Delaware’s governor has officially signed into law the state’s comprehensive data privacy law. This noteworthy development positions Delaware as the thirteenth state in the U.S. to institute such a law. This is the seventh law of its type that has been enacted in 2023, following similar legislation enacted in Iowa, Indiana, Tennessee,…
After the fallout of Facebook v. Duguid, many have waited anxiously to observe how district courts would interpret the Supreme Court’s clarified definition of an automatic telephone dialing system (ATDS). The case took the spotlight due to its severe implications under the Telephone Consumer Protection Act (TCPA). This development comes as part of Manatt’s consistent…
On the first day of 2021, Congress unveiled new legislation, the Corporate Transparency Act (the “CTA”), conceived as a crucial part of the Anti-Money Laundering Act of 2020 and its yearly National Defense Authorization Act. The CTA necessitates specific entities to divulge informative data pertaining to their owners, the management and the individuals who contributed…
California is taking initiative yet again with new potential regulations surrounding privacy, cybersecurity, as well as artificial intelligence (AI). This progression includes several noteworthy elements such as alterations in the California Consumer Privacy Act (CCPA) rulemaking process as well as the launching of a novel generative AI effort. Here, we will discuss the updated developments…
Last year bore witness to an unfortunate yet predictable upsurge in cyber-attacks, highlighting a pressing need for robust cybersecurity operational frameworks across businesses and corporations worldwide. Cyber criminals, capitalizing on vulnerabilities in third-party software, have been engaging in escalated, intricate extortion schemes leading to significant financial and operational impacts. This piece by K&L Gates LLP…
Organizations across the globe are grappling with the rapidly evolving landscape of data privacy regulations. From the proliferation of state and federal laws within the United States to the international waters of directives such as the European Union’s General Data Protection Regulation (GDPR), businesses big and small face challenges in complying with a myriad of…