fbpx
California Expands Definition of Sensitive Information to Include Citizenship or Immigration Status

California Expands Definition of Sensitive Information to Include “Citizenship or Immigration Status”

In a further sign of the increased focus on personal information that is “sensitive,” the California Consumer Privacy Act (CCPA), as amended by the  California Privacy Rights Act (CPRA), has expanded the categories of information deemed sensitive to now include “citizenship or immigration status.” Specifically, in October 2023, Governor Newsom signed Assembly Bill 947. As …

Read more California Expands Definition of Sensitive Information to Include “Citizenship or Immigration Status”

CCPA Enforcement In Action But Questions Abound

CCPA Enforcement In Action But Questions Abound

The passage of the California Consumer Privacy Act (CCPA) in 2018 (and effectual January 2020) and now significantly amended and expanded by the California Privacy Rights Act (CPRA) set the stage for other comprehensive state privacy laws. Following suit, Colorado, Connecticut, Virginia, and Utah now have relatively similar comprehensive privacy laws. With comprehensive privacy laws like the …

Read more CCPA Enforcement In Action But Questions Abound

Cybersecurity Ethics For Attorneys And Law Firms

Cybersecurity Ethics For Attorneys And Law Firms

As law firms increasingly digitize their systems and practically all facets of the practice of law move into the cloud, there is significant danger lurking in the shadows in the form of breaches. Although organizations of all types and sizes see marked upticks in cybersecurity incidents, lawyers, with their ethical obligations to keep clients’ information …

Read more Cybersecurity Ethics For Attorneys And Law Firms

The Children's Online Privacy Protection Act (COPPA)

The Children’s Online Privacy Protection Act (COPPA)

Passed in 1998, one of the older federal laws centered on privacy is the Children’s Online Privacy Protection Act (COPPA). Enacted to protect children’s safety and privacy in the new age of the internet, COPPA went into effect in April of 2000. The law imposed obligations on commercial operators of online services directed to children under age 13. …

Read more The Children’s Online Privacy Protection Act (COPPA)

The Importance Of Having Reasonable Security

The Importance Of Having Reasonable Security

Whether on the state, federal, or international level, laws are increasingly mandating data security that meets “a standard of reasonableness.” What constitutes reasonable security measures relies on the specific business sector and data under inventory. For example, a healthcare provider with sensitive health information on many patients must have a robust data security program. Security …

Read more The Importance Of Having Reasonable Security

New York SHIELD Act

New York’s Stop Hacks And Improve Electronic Data Security (SHIELD) Act

New York State is the latest addition to the rapid flurry of privacy, data protection, and cybersecurity regulatory frameworks proliferating on the international, national, and state levels.  On July 25, 2019, New York’s governor signed into law the SHIELD (Stop Hacks and Improve Electronic Data Security) Act. The Act amends New York’s current data breach statute …

Read more New York’s Stop Hacks And Improve Electronic Data Security (SHIELD) Act

The Health Insurance Portability And Accountability Act (HIPAA)

The Health Insurance Portability And Accountability Act (HIPAA)

The Health Insurance Portability and Accountability Act (HIPAA) is a broad-ranging law that, in part, imposes responsibilities on a variety of entities concerning Protected Health Information (PHI). Though beyond the scope of this discussion, there are aspects of the Act that regulate continuity of healthcare plans and benefits (Title I), here our focus is on …

Read more The Health Insurance Portability And Accountability Act (HIPAA)

The California Consumer Privacy Act (CCPA)

The California Consumer Privacy Act (CCPA)

The California Consumer Privacy Act (CCPA) is a broad-ranging legal framework regulating data and enhancing Californians’ privacy rights. The law is expected to change the way companies across the United States navigate data protection and privacy and spur other states to pass similar legislation. In the United States, various privacy and data-focused laws have existed …

Read more The California Consumer Privacy Act (CCPA)