Navigating Privacy Regulations in Healthcare: HCCA’s Compliance Academy Offers Essential Insights

The Health Care Compliance Association (HCCA) is hosting a Healthcare Privacy Compliance Academy from December 11th to 14th in Orlando, FL. This event is particularly relevant for legal professionals specializing in healthcare law and corporate compliance. The HCCA’s Healthcare Privacy Compliance Academy aims to offer a profound understanding of effective compliance management within a healthcare…

Read More

AI-Powered Legal Case Analysis: Enhancing Strategy and Insights Beyond “It Depends”

Legal professionals recognize that the answer to almost every legal question is, “It depends.” In the high stakes context of law—where cases surround unfortunate events and substantial amounts of money—clients naturally raise questions about the likelihood of a positive outcome. Providing an accurate prediction for case outcomes typically requires years of reasoning through myriad scenarios,…

Read More

California Privacy Protection Agency Unveils Cybersecurity Draft Rules: A New Landscape for Data Privacy Compliance

The California Privacy Protection Agency (CPPA) recently posted discussion drafts of its upcoming regulations on cybersecurity audits and risk assessments. The drafts, shared in anticipation of the Agency’s public board meeting on September 8, 2023, detail their plans for the second rulemaking package under the California Consumer Privacy Act (CCPA) since the amendment by the…

Read More

FERPA Compliance and the Importance of Redacting Personally Identifiable Information

In the field of data protection, the significance of Personally Identifiable Information (PII) redaction cannot be understated. Traditional cornerstones in the safeguarding of client information exist in the form of compliance standards like the Health Insurance Portability and Accountability Act (HIPAA), the Gramm-Leach-Bliley Act (GLBA), and the Family Educational Rights and Privacy Act (FERPA). These…

Read More

Navigating US Sanctions Investigations: A Comprehensive Guide for Companies

As geopolitical tension rises and the US continues to expand its sanctions, the national agencies are intensifying their resources and attention on the investigation of possible sanctions violations. The primary focus of these investigations covers dealings associated with Russia, China, and Iran. For this reason, companies must understand the investigative procedures undertaken by both the…

Read More

Cognizant/TMG Data Breach Exposes Sensitive Consumer Information: Legal Implications and Cybersecurity Concerns

On September 1, 2023, Cognizant / TMG, a leading consulting firm, submitted a data breach notice to the Attorney General of Texas. This was following the discovery of unauthorized access to vital data held on the company’s network by unknown actors. A review into this breach revealed highly sensitive consumer information may have been exposed….

Read More

Ransomware Attacks Escalate in Sophistication: The Urgency for Robust Cybersecurity Measures

The proliferating and concerning trend of ransomware attacks shows no signs of abating, as it becomes evident that they are advancing in both scope and sophistication. A recent incident resulted in data deletion for a majority of a cloud provider’s customers, demonstrating the increasing intensity of these cyberattacks. Reportedly, not only was the sheer number…

Read More

California’s Delete Act: Strengthening Data Broker Regulation and User Privacy Rights

The Golden State appears poised to make alterations to its existing data broker law with Senate Bill 362, informally dubbed the Delete Act (“the Act”). Following its recent approval in the Assembly’s Committee on Privacy and Consumer Protection, the Act has been passed on to the Assembly’s Committee on Appropriations. This imminent change in legislation…

Read More

Experian Settles FTC Allegations: Lessons for Corporates on Compliance with Privacy Regulations

The Federal Trade Commission (FTC) reached a proposed settlement with Experian Consumer Services (Experian) on August 14th, 2023. This proposal was derived from allegations that Experian violated the FTC Act and the Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003 (CAN-SPAM Act). It was allegedly involved in the inappropriate sending of marketing…

Read More

Document Redaction: Essential Practice for Legal and Healthcare Confidentiality

Emerging as a pivotal component in legal and healthcare practices, document redaction has remained a fairly obscure field for many professionals. This process, which involves the meticulous removal or obscuring of sensitive information from documents before they are made public or shared, is critical in industries demanding the utmost confidentiality. Here’s what you need to…

Read More

Connecticut Tightens Telemarketing Regulations: Protecting Consumer Privacy in the Digital Age

Telemarketing practices in Connecticut are set to undergo a series of changes, as recent amendments to the state’s telemarketing law come into effect from October 1, 2023. As per the amendment, certain definitions have been broadened and tighter restrictions are being placed on telephonic sales calls. The amendments were prompted by robust public discussion about…

Read More

Data Breach Lawsuit Reversal Highlights Evolving Legal Landscape in Privacy and Class Certification

In a significant turn of events, the Fourth Circuit has reversed a previous judgment consolidating customer lawsuits resulting from a 2018 data breach suffered by a multinational hotel corporate franchise. The original verdict had permitted a class certification in the high-profile consumer data breach case, but the recent decision throws this ruling into ambiguity, drawing…

Read More

FCC Imposes $20 Million Penalty on Telecom Firms for Customer Privacy Breach

In a recent move that highlights the ongoing rigour in the telecommunications regulatory landscape, the Federal Communications Commission (FCC) has admonished telecom companies with a hefty penalty for failing to safeguard the privacy of their customers. The stern directive recalls the strict enforcement of the protection of Customer Proprietary Network Information (CPNI). Issuing a Notice…

Read More

Leveraging ChatGPT in the Workplace: A Practical Guide for Professionals

The fascinating world of Generative AI, prominently manifested through ChatGPT, is increasingly encroaching on public awareness. Its rise is spurring an interesting mix of potential fear and promise in regard to the future of work. As its relevance in the professional world becomes more profound, it opens up new opportunities for removing some traditionally tiresome…

Read More

Employee Monitoring in Law Firms: Balancing Productivity and Privacy Concerns

Law firms across the globe are grappling with an increasingly contentious issue: employee monitoring. In the pursuit of efficiency and productivity, firms are adopting technologies to track virtually every aspect of their staff’s workaday lives; from badge swipes to keystrokes. The debate around these practices is heating up, with critics arguing the intrusion into personal…

Read More

Cooper Davis Act: Balancing Drug Control and Privacy Concerns in a Controversial Amendment

The Cooper Davis Act, an amendment proposed to the Controlled Substances Act in the United States, has been a controversial proposal stirring contentious conversations among differing stakeholders including parents, consumer safety advocates, and anti-drug coalitions, as well as the DEA, privacy experts, and constitutional scholars. A recent article details the ongoing disputes and disagreements. The…

Read More