Corporate Transparency Act: Unraveling the Implications for Businesses and Compliance

On the first day of 2021, Congress unveiled new legislation, the Corporate Transparency Act (the “CTA”), conceived as a crucial part of the Anti-Money Laundering Act of 2020 and its yearly National Defense Authorization Act. The CTA necessitates specific entities to divulge informative data pertaining to their owners, the management and the individuals who contributed…

Read More

California Leads the Way: Privacy, Cybersecurity, and AI Regulations Under Review

California is taking initiative yet again with new potential regulations surrounding privacy, cybersecurity, as well as artificial intelligence (AI). This progression includes several noteworthy elements such as alterations in the California Consumer Privacy Act (CCPA) rulemaking process as well as the launching of a novel generative AI effort. Here, we will discuss the updated developments…

Read More

Cybersecurity in 2021: Examining the SolarWinds and MOVEit Attacks and the Need for Robust Protection

Last year bore witness to an unfortunate yet predictable upsurge in cyber-attacks, highlighting a pressing need for robust cybersecurity operational frameworks across businesses and corporations worldwide. Cyber criminals, capitalizing on vulnerabilities in third-party software, have been engaging in escalated, intricate extortion schemes leading to significant financial and operational impacts. This piece by K&L Gates LLP…

Read More

UK Travel Rule and Sector 22 Cryptoasset Guidelines: Navigating Compliance in the Evolving Landscape

The Joint Money Laundering Steering Group (JMLSG) of the United Kingdom has recently announced changes to its guidelines under Sector 22, specifically addressing cryptoasset exchange providers and custodian wallet providers. An additional inclusion to this revised guidance is Annex I, which sets out clear guidance on the U.K. Travel Rule for cryptoassets. Initially introduced under…

Read More

EU-U.S. Data Privacy Framework: A Renewed Path for Secure Transatlantic Data Transfers

In a significant development within the realm of data privacy international law, the European Commission gave official sanction to the EU-U.S. Data Privacy Framework (DPF) on July 10, 2023, by instituting an ‘adequacy decision’. In the context of the General Data Protection Regulation (GDPR), ‘adequacy decisions’ act as the primary legal instrument for the transfer…

Read More

ICO Draft Guidance Addresses Biometric Data and Technology Compliance Concerns

The Information Commissioner’s Office (ICO) has issued a draft guidance on biometric data and technologies, according to JD Supra. As per the document, organisations developing or employing biometric technologies are the prime target of this guidance. The guidance offers important insights and is aimed at helping institutions navigate the intricate laws concerning biometric data, which…

Read More

Telemedicine’s Impact on Casualty Claims and Injury Assessments: Challenges and Adaptations

The rise of telemedicine, characterized by digital health records and online medical consultations, has created a noticeable shift in healthcare efficiency and accessibility. However, these technological advancements pose unique challenges, particularly in the area of casualty claims and injury assessment, echoing the sentiment discussed in this J.D. Supra article. There has been a significant increase…

Read More

University of Minnesota Faces Class Action Lawsuit Over Alleged Data Breach Impacting 7 Million

A former University of Minnesota undergraduate student has initiated a class action lawsuit against the university, claiming it failed to sufficiently protect the private information of over 7.000.000 individuals. The individuals the lawsuit purports were affected encompass a broad range: academic staff, general staff, as well as undergraduate, graduate, and doctoral students. The data leak…

Read More

Digital Subscriber Dismissal: Federal Court on Video Privacy Protection Act’s Definition of “Consumer”

In a case closely watched by legal professionals and corporations with online subscription services, a U.S. Federal Court recently dismissed a claim by a newsletter subscriber under the Video Privacy Protection Act (“VPPA”). The court reasoned that, despite holding a digital subscription to an online newsletter, the plaintiff was not a “consumer” within the definition…

Read More

California Privacy Protection Agency’s Public Meeting Addresses Cybersecurity Audits and Risk Assessments

The five-member Board of the California Privacy Protection Agency (the “CPPA”) conducted an open public meeting early this month, as stated on an article by JD Supra. The meeting, which occurred on the 8th of September, 2023, aimed to investigate an array of topics, among which were draft regulations related to risk assessments and cybersecurity…

Read More

Data Defensibility: The Overlooked Essential in Corporate Divestiture Strategies

In the wake of accelerating divestitures worldwide, corporate legal teams face a crucial challenge – how to remain data defensible during these transformative events. Understanding the importance of this key component should be integral to any divestiture strategy. It stretches beyond simply creating a divestiture strategy, monitoring the portfolio, finding a buyer, preparing to separate…

Read More

Accidental Email Exposes Age Discrimination, Leading to Legal Repercussions for Employer

In a case that reaffirms the critical importance of both professional decorum and legal compliance in internal and external communications, a Brussels Labour Court has recently delivered a decision penalising an employer for unintentionally revealing its practice of age discrimination. The case revolved around a job applicant who accidentally became privy to an evidence that…

Read More

Navigating AI Risks: A Comprehensive Guide for Employers

The ever-increasing use of generative artificial intelligence (AI) by employers globally has taken centre stage in today’s digital era. This AI, capable of generating realistic responses to prompts, is transforming how businesses operate in terms of productivity and cost-efficiency. Some examples that have taken the market by storm are OpenAI, Github Copilot, Claude, and ChatGPT,…

Read More

EU-U.S. Data Privacy Framework: Weighing the Pros and Cons for American Businesses

As of the 10th of July 2023, a significant shift has occurred in the handling of personal data records between the U.S. and the European Union (EU). The European Commission has adopted the EU-U.S. Data Privacy Framework (DPF), an initiative designed to mitigate legal uncertainties and administrative burdens for U.S. organisations utilising personal data imported…

Read More

Massachusetts Gaming Commission Introduces Stringent Sports Wagering Data Privacy Rules

Legal professionals working in the bustling sports wagering industry are advised to take note of the latest data privacy rules imposed by the Massachusetts Gaming Commission. The new Sports Wagering Data Privacy Rules, effective from September 1, 2023, will require businesses to significantly reassess and reinforce their customer data protection policies. Operating under the mandate…

Read More

German Federal Labor Court Evaluates WhatsApp Privacy: Implications for Workplace and Legal Confidentiality

In a momentous decision dated August 24, 2023 by the Bundesarbeitsgericht (BAG), Germany’s Federal Labor Court, the expectation of universal confidentiality in WhatsApp chats was scrutinized. The court was tasked with determining the extent to which comments made in private WhatsApp chat groups could constitute grounds for issuing an (extraordinary immediate) dismissal. This decision comes…

Read More

Facebook’s $725 Million Cambridge Analytica Settlement Eyes 17 Million Claims

Law.com’s recent class action briefing, Critical Mass, touched upon significant legal stories of the week, notably the impressive $725 million class action settlement surrounding Facebook’s Cambridge Analytica scandal. The piece, penned by Amanda Bronstad, reported that the case has accumulated over 17 million claims. The astronomical figure clearly left an impact on the presiding federal…

Read More

Security Vulnerabilities in DNA Sequencing Machines: Examining Biosecurity and Legal Implications

In the pursuit of scientific innovations and medical advancements, the use of DNA sequencing machines has become commonplace. However, recent findings suggest that these machines might not be as secure as one might expect. Specifically, Illumina DNA sequencing machines have been found to contain security vulnerabilities that are of increasing concern to legal professionals and…

Read More