-
Nov 14, 2024 | 
jdsupra.com | James Shreve
The Federal Trade Commission (FTC) has increasingly turned to equitable remedies in cases involving alleged violations of privacy and data security laws, particularly for companies using artificial intelligence (AI) platforms. This trend began with the 2019 case involving Cambridge Analytica, where the FTC mandated the deletion or destruction of improperly obtained consumer data.
-
Apr 23, 2024 | 
mondaq.com | David Duffy |Susan Lorenc |Carlos Ortiz |James Shreve
The Illinois Senate recently passed legislation by a 46-13 vote that would significantly amend the Illinois Biometric Information Privacy Act ("BIPA").1 Senate Bill 2979 ("SB2979'), which Senate President Pro Tempore William Cunningham introduced, includes a significant benefit to corporations, employers, and other private entities in Illinois by clarifying that, in a case where the same violation occurs more than once, it would constitute only one violation for purposes of statutory...
-
Mar 12, 2024 | 
mondaq.com | James Shreve |David Duffy |Dremain Moore
In the Illinois Senate, a recently proposed Biometric
Information Privacy Act (BIPA) amendment seeks to change how BIPA
claims accrue, limiting the amount of damages available in
instances where there are multiple violations.
The Cothron decision, which held that BIPA claims accrued each
and every time biometrics were collected, transmitted, or stored
absent a written release, emboldened plaintiffs to take aggressive
positions when pursuing BIPA claims.
-
Feb 12, 2024 | 
mondaq.com | James Shreve
The Federal Trade Commission on Feb. 1 entered a consent order to resolve a complaint alleging unfair and deceptive
practices by Blackbaud, Inc. relating to a well-publicized data
breach at the company.
-
Dec 8, 2023 | 
mondaq.com | James Shreve
The New York Department of Financial Services (NYDFS) finalized
amendments to its
cybersecurity regulations on November 1, 2023, marking a
significant update in the state's approach to cyber threats. The process involved multiple stages, starting with a pre-proposal
in July 2022, followed by two additional proposals in November 2022
and June 2023. The final version, which incorporated feedback from
various stakeholders, introduced several key changes and
clarifications from earlier drafts.
-
Dec 5, 2023 | 
jdsupra.com | James Shreve
The New York Department of Financial Services (NYDFS) finalized amendments to its cybersecurity regulations on November 1, 2023, marking a significant update in the state's approach to cyber threats. The process involved multiple stages, starting with a pre-proposal in July 2022, followed by two additional proposals in November 2022 and June 2023. The final version, which incorporated feedback from various stakeholders, introduced several key changes and clarifications from earlier drafts.
-
Dec 5, 2023 | 
lexology.com | James Shreve
The New York Department of Financial Services (NYDFS) finalized amendments to its cybersecurity regulations on November 1, 2023, marking a significant update in the state's approach to cyber threats. The process involved multiple stages, starting with a pre-proposal in July 2022, followed by two additional proposals in November 2022 and June 2023. The final version, which incorporated feedback from various stakeholders, introduced several key changes and clarifications from earlier drafts.
-
Nov 30, 2023 | 
mondaq.com | James Shreve
On October 27, 2023, the Federal Trade Commission (FTC)
announced a significant amendment to the
agency's Safeguards Rule under the Gramm-Leach-Bliley Act
(GLBA). This amendment, reflecting an increasingly strident stance
by the FTC on cybersecurity topics, mandates that non-banking
financial institutions report certain data breaches and security
events. Interestingly, the prudential banking regulators introduced
data breach notice requirements, using GLBA authority in 2005.
-
Nov 29, 2023 | 
jdsupra.com | James Shreve
On October 27, 2023, the Federal Trade Commission (FTC) announced a significant amendment to the agency’s Safeguards Rule under the Gramm-Leach-Bliley Act (GLBA). This amendment, reflecting an increasingly strident stance by the FTC on cybersecurity topics, mandates that non-banking financial institutions report certain data breaches and security events. Interestingly, the prudential banking regulators introduced data breach notice requirements, using GLBA authority in 2005.
-
Nov 28, 2023 | 
lexology.com | James Shreve
On October 27, 2023, the Federal Trade Commission (FTC) announced a significant amendment to the agency’s Safeguards Rule under the Gramm-Leach-Bliley Act (GLBA). This amendment, reflecting an increasingly strident stance by the FTC on cybersecurity topics, mandates that non-banking financial institutions report certain data breaches and security events. Interestingly, the prudential banking regulators introduced data breach notice requirements, using GLBA authority in 2005.
