The HHS Office for Civil Rights (OCR) and the National Institute of Standards and Technology (NIST) published the final version of Special Publication (SP) 800-66 Revision 2, aimed at helping covered entities and business associates better understand and comply with the HIPAA Security Rule. The final version serves as a resource guide and maps the […]
Read more
Just prior to its first-in-the-nation presidential primary this month, the New Hampshire legislature passed SB255 that is expected by signed into law by Governor Christopher Sununu that will make it the second law comprehensive consumer data privacy bill enacted in 2024. The bill’s effective date is January 1, 2025. The New Hampshire legislation largely follows […]
Read more
The Consumer Financial Protection Bureau (CFPB) has proposed a rule to define a market for general-use digital consumer payment applications. Larger participants in this market would be subject to CFPB supervision and examination authority under the Consumer Financial Protection Act (CFPA). The proposed market would cover providers of funds transfer and wallet functions through consumer […]
Read more
California Attorney General Rob Bonta announced on July 14th an investigative sweep with written inquiry letters sent to large California employers requesting information regarding the companies’ compliance with the employee data provisions of the California Consumer Privacy Act (CCPA). AG Bonta’s letters specifically address businesses’ compliance with the CCPA’s legal protections governing the handling of […]
Read more
Aug. 22, 2022 – For years, the issue of regulating data privacy has been addressed largely by individual states, with little comprehensive action on the federal level. But that may be about to change in light of a more aggressive Federal Trade Commission (FTC), a new bipartisan proposal in Congress, and the U.S. Supreme Court’s […]
Read more
July 19, 2021 – Colorado became the third state to enact comprehensive data privacy legislation – after California and Virginia – when Gov. Jared Polis (D) signed the Colorado Privacy Act into law on July 8. The Colorado law is similar to the two other states’ laws, in that it grants individuals greater control over […]
Read more
May 17, 2021 – Widespread public concern over the security and privacy of personal data is putting increased pressure on state and federal legislators to regulate data collection, tracking and targeting, and today this issue is “at an inflection point about what we are going to start seeing from the federal government,” according to Alison […]
Read more Oct. 19, 2020 – Last week the California Department of Justice released a third set of proposed modifications to the regulations regarding the California Consumer Privacy Act of 2018 (CCPA) that went into effect on Aug. 14, largely aimed at making sure that consumers are able to easily opt out of allowing their personal data […]
Read more
July 13, 2020 – Although more than 65 companies and industry organizations requested that enforcement of the California Consumer Privacy Act (CCPA) be delayed beyond the July 1 effective date, California Attorney General Xavier Becerra asserted on July 1 that enforcement begins now, despite the COVID-19 pandemic and the fact that the final rulemaking package […]
Read more June 15, 2020 – The COVID-19 pandemic has brought increased use of telemedicine and group conferencing platforms, as well as prompted talk of using cellphones to do contact tracing, but this uptick in using technology in new and expanded ways also has increased the risks to personal data. Unfortunately, at a time when consumer data […]
Read more