-
1 month ago | 
natlawreview.com | Eric Troutman |Nathaniel M. Glasser |Benjamin Perry |Lauren Watson
The FCC’s critical new TCPA revocation rule is set to go into effect on April 11, 2025– that’s just 45 days from now. Yes, a consumer will be able to revoke by “any reasonable means” but that is already the case. And yes, a caller will only have ten business days to honor a revocation. But those are tiny changes compared to the new scope of revocation rules–which is what EVERYBODY needs to be paying attention to right now.
-
2 months ago | 
jdsupra.com | Benjamin Perry |Lauren Watson |Zachary Zagger
An online retailer was recently hit with the first class action under Washington’s consumer health data privacy law alleging that it used advertising software attached to certain third-party mobile phone apps to unlawfully harvest the locations and online marketing identifiers of tens of millions of users.
-
2 months ago | 
ogletree.com | Benjamin Perry |Lauren Watson |Zachary Zagger
Quick HitsAn online retailer was hit with the first class action under Washington State’s My Health My Data Act (MHMDA), claiming that the retailer unlawfully harvested sensitive location data from users through advertising software integrated into third-party mobile apps.
-
2 months ago | 
ogletree.com | Benjamin Perry |Lauren Watson |Zachary Zagger
Quick HitsAn online retailer was hit with the first class action under Washington State’s My Health My Data Act (MHMDA), claiming that the retailer unlawfully harvested sensitive location data from users through advertising software integrated into third-party mobile apps.
-
2 months ago | 
jdsupra.com | Benjamin Perry |Lauren Watson |Zachary Zagger
The U.S. Department of Homeland Security (DHS) recently published new security requirements for certain restricted transactions covered by the U.S. Department of Justice’s (DOJ) sensitive data export rules. The security requirements could create compliance issues for employers with workers in certain countries that have been identified as posing national security concerns, a list that currently includes China (including Hong Kong and Macau), Cuba, Iran, North Korea, Russia, and Venezuela.
-
Nov 6, 2024 | 
jdsupra.com | Benjamin Perry |Gustavo Suárez |Lauren Watson
The Consumer Financial Protection Bureau (CFPB) recently issued guidance that takes an aggressive position regarding the scope of the Fair Credit Reporting Act (FCRA) as covering certain employee monitoring and assessment tools used for hiring and to gauge employee productivity. This development affects virtually every employer using third-party vendors for employee screening, monitoring, or assessment.
-
Aug 30, 2024 | 
jdsupra.com | Simone Francis |Benjamin Perry |Lauren Watson
In an era when artificial intelligence (AI) is rapidly transforming the workplace, Illinois has joined the growing list of states taking legislative action to further regulate the use of AI in employment settings, which follows the May 17, 2024, enactment of more sweeping legislation in Colorado. On August 9, 2024, Governor JB Pritzker signed House Bill (HB) 3773 into law, marking a significant addition to the Illinois Human Rights Act.
-
Aug 29, 2024 | 
ogletree.com | Simone Francis |Benjamin Perry |Lauren Watson
Quick HitsIllinois’s new AI regulations under HB 3773 take effect on January 1, 2026, giving employers a limited window to prepare for compliance. The law broadly defines “artificial intelligence” to include any machine-based system that generates outputs influencing employment decisions, with no specific exemptions provided. Employers must provide notice to employees if AI is used in recruitment, hiring, promotion, or other employment-related decisions.
-
Aug 19, 2024 | 
jdsupra.com | Benjamin Perry |Lauren Watson
The Federal Trade Commission (FTC) has a long-standing habit of creating legal obligations through blog posts. Recent communications from the FTC by way of its Office of Technology Blog evidence an aggressive expectation regarding anonymization standards and whether hashing of information satisfies that standard.
-
Aug 16, 2024 | 
ogletree.com | Benjamin Perry |Lauren Watson
Quick HitsThe FTC recently reaffirmed guidance issued in 2012 that takes the position that hashing, which is a process to convert data (such as your name or a password) into a string of characters and numbers to mask the original data, does not constitute “anonymization” of that data. To support that conclusion, the FTC also relies upon a standard for “anonymization” whereby “data is only anonymous when it can never be associated back to a person”—a potentially impossible result.
