On May 29, 2018, Colorado Governor John Hickenlooper signed House Bill (“HB”) 1128 into law, amending the State’s data breach notification statute and imposing significant new requirements on entities that must notify Colorado residents of a data incident pursuant to Colo. Rev. Stat. § 6-1-716.
Read more »Latest Blog Posts
-
Colorado Amends Data Breach Notification Statute Posted on: June 18, 2018 In: Digital Insights Blog
-
Benefits of A Security Posture Assessment Posted on: May 07, 2018 In: Digital Insights BlogThe most difficult step to take in tackling the digital security goals of an organization is often the first one. Before responding to an audit, before scheduling a penetration test, before implementing a new privacy policy or formulating an incident response plan, the most important thing a company can do right from the start about security is to have a conversation.
Read more »
-
GDPR, Part VII: A Brief Guide to the GDPR Posted on: May 02, 2018 In: Digital Insights BlogOn May 25, 2018, the European Union’s General Data Protection Regulation (GDPR) will take effect. The primary objectives of the GDPR are to return control of “personal data” to EU citizens and residents and to simplify the regulatory environment for international business by unifying regulations within the EU.
Read more »
-
Protecting Against Ransomware Attacks: Security and Best Practices Tips Posted on: April 11, 2018 In: Digital Insights BlogEncryption attacks, more commonly known as ransomware, are one of the major cyber threats facing businesses today. No company is immune from threat of attack—any business that is connected to the internet is at risk. Industry experts estimate that a business falls victim to a ransomware event every 40 seconds.
Read more »
-
The United States of Data Breach Notification Posted on: April 10, 2018 In: Digital Insights BlogThe absence of comprehensive federal legislation on data breach notification has led to the development of a patchwork of state laws to ensure that individuals receive timely notification of data breaches that might impact their personal data.
Read more »
-
Oregon Amends Data Breach Notification Law Posted on: April 09, 2018 In: Digital Insights BlogIn March 2018, Oregon Governor Kate Brown signed into law new measures to strengthen the state’s existing data breach notification statute, ORS § 646A.604. The legislation is set to take effect in June 2018 and, among other things, will require organizations that experience a data breach affecting Oregon residents to notify affected individuals of the data breach within 45 days of its discovery, unless asked to delay notification by law enforcement.
Read more »
-
Virginia Imposes New Breach Notification Requirements on Tax Preparers Posted on: March 16, 2018 In: Digital Insights BlogOn Friday, March 9, 2018, Virginia Governor Ralph Northam signed H.B. 183, which imposes data breach notification requirements on certain tax preparers. The bill, introduced by Delegate Hala S. Ayala, had unanimous support in both the Virginia House and Senate.
Read more »
-
The End (of Net Neutrality) May Be Just the Beginning Posted on: March 07, 2018 In: Digital Insights BlogIn 2015 the Federal Communications Commission (FCC) issued its Open Internet Order, which reclassified landline and mobile broadband internet from an information service under Title I of the Communications Act of 1934 to a telecommunication service under Title II. This reclassification, commonly referred to as “net neutrality,” made internet service providers (ISPs) subject to most of the same regulations and oversight that govern other utilities, such as electricity and telephone services.
Read more »
-
Supreme Court Won’t Reconsider Standing Principles from Spokeo Posted on: February 05, 2018 In: Digital Insights BlogOn January 22, 2018, the United States Supreme Court denied a petition for writ of certiorari that requested review of the court’s May 2016 ruling in Spokeo, Inc. v. Robins. The 2016 Spokeo ruling concerned the types of injuries that are sufficient to confer standing to sue under Article III of the U.S. Constitution.
Read more »
-
The Meltdown and Spectre Bug Posted on: January 24, 2018 In: Digital Insights Blog2018 kicked off with security researchers finding two serious security flaws in chips used in personal computers and mobile devices. The two flaws or bugs, named “Meltdown” (computers) and “Spectre” (mobile devices), make data stored in individual devices vulnerable to attack by allowing hackers to access and steal passwords, encryption keys, or other sensitive information from the device’s memory.
Read more »
-
GDPR, Part VI: What Are the Roles of U.S. Regulators? Posted on: December 21, 2017 In: Digital Insights BlogWhen the General Data Protection Regulation (GDPR) goes into effect on May 25, 2018, the European Union (EU) will mark a sea change in how its member states will seek to protect and regulate the collection and use of EU citizens’ data. But as we have noted in our seven-part series analyzing the impact of Europe’s new data regulation and the hurdles that businesses will have to clear in order to comply with its provisions, the effects of the GDPR will not stop at the EU water’s edge.
Read more »
-
GDPR, Part V: Understanding the Fines and Penalties Provisions Posted on: November 28, 2017 In: Digital Insights BlogNon-compliance with the forthcoming General Data Protection Regulation (GDPR) can mean significant fines and administrative penalties for non-compliant data controllers and processors. The GDPR will go into effect on May 25, 2018, when the former Data Protection Directive 95/46/EC is repealed. While the former directive was binding on all EU member states, it left to the national authorities of each state the choice of “forms or methods” to achieve compliance with its intended results.
Read more »
Blog Search
Featured Posts
- December 05, 2018 Welcome to Lewis Brisbois’ IP & Technology Law Blog
- November 12, 2018 Lack of Code Diversity in Cryptocurrency Ethereum May be Propagating Bad Code
Blog Categories
Blog Tags
aba
alabama
america invents act
american bar association
arkansas
audit
blockchain
breach notification
california
canada
ccpa
client notification
coast guard
colorado
congress
consent order
consumer consent
consumer notification
critical security controls
cyber threat
data breach
data privacy directive
data security
delaware
department of financial services
department of health and human services
department of state
department of transportation
dmarc
ebt
electronic benefit transfer
electronic protected health information
email
employment
equifax
ethics
eu
eu-u.s. data privacy shield
eu-u.s. privacy shield
european parliament
european unioin
european union
executive order
fcc
fcra
federal trade commission
financial firms
fines
gdpr
hacking
hippa
homeland security
identity fraud
incidence response plan
innovation
intellectual property
internet
internet service provider
inter partes review
it
malware
meltdown
microsoft office 365
multi-factor identification
net neutrality
new mexico
new york
ninth circuit
nist framework
nist security controls
office for civil rights
oregon
patent litigation
patents
penalties
personal data
pipeda
pre-breach services
privacy act
ptab
ransomware
rdp
remote desktop protocol
research
security rule
social engineering
social media
south dakota
spear-phishing
spectre
spokeo
statute
supervisory authorities
supreme court
tax preparers
technology
tennessee
virginia
washington
workplace policy