Address Confidentiality

ALERT: New State Privacy Requirements for Mortgages Funded After December 1, 2021Threats, Harassment, and Contact Tracing: Why Privacy Programs are Expanding to Protect Health Care Workers

Adtech

Pet Stairs, Wiretapping, and Cookies: Implications of the Third Circuit’s Popa OpinionIntroducing… the Global Privacy Control

Announcements

A Letter from the Editors

Artificial Intelligence (AI)

Technological and Legal Defenses Against Privacy Attacks on Machine Learning ModelsHow Smart Is Your Artificial Intelligence Policy?The Future of Construction: AI and Predictive Maintenance Part 1

Biometric Technology

Nothing Is Really Private, Until It Is Required to Be: Mississippi Legislature Proposes “Biometric Identifiers Privacy Act” to Protect Individual’s Personal InformationBiometric Privacy Law Expansions and Private Rights of Action

CCPA

Technological and Legal Defenses Against Privacy Attacks on Machine Learning ModelsCalifornia Announces Increased Scrutiny on CCPA Violations with Latest $1.2 Million Enforcement Action SettlementAnother Data Privacy Law? Colorado Enacts the Colorado Privacy Act

Claims Management and Resolution

Four New Cyber War Exclusions from Lloyd’s Market Association3 Cyber Insurance Steps Critical to Cyber-Risk Management

CMMC

Continuing Effort to Protect National Security Data and NetworksNew “Basic Assessment” Is a Bridge to CMMC for Defense Contractors

Coronavirus (COVID-19)

A Second Chance for the Public Health Emergency Privacy ActPrivacy Requirements under COVID-19 Emergency Rental Assistance Program2020 Brings Times of Change: Key Privacy Law Updates This Year

Coverage for Emerging Technologies

U.S. Senate Judiciary Committee Holds Historic Hearing on AI RegulationA Fintech Leader’s Thoughts on the North Carolina Regulatory Sandbox ActTechnology Boom in NC? What You Should Know About the Proposed Regulatory Sandbox in the Tarheel State

CPRA

Another Data Privacy Law? Colorado Enacts the Colorado Privacy ActPrivacy Litigation Updates for the Financial Services Sector: Claims Against Yodlee Survive and Limited Discovery of Envestnet AllowedPrivacy Moves to the East Coast: Virginia Set to Enact Comprehensive Consumer Data Protection Law

Cybersecurity

Technological and Legal Defenses Against Privacy Attacks on Machine Learning ModelsThe Future of Construction: AI and Predictive Maintenance Part 1Tabletop Exercises as Risk Mitigation Tools

Data Breach

The Future of Construction: AI and Predictive Maintenance Part 1Tabletop Exercises as Risk Mitigation ToolsHow a Zero-Day Flaw in MOVEit Led to a Global Ransomware Attack

Data Collection

Does the End Justify the Means? Privacy Advocates React to the Cooper Davis ActCalifornia Takes the Wheel: A Closer Look at Privacy in Connected VehiclesDoDIG Audit of Controlled Unclassified Information (CUI) Program: Findings and Next Steps for Contractors

Data Privacy

Does the End Justify the Means? Privacy Advocates React to the Cooper Davis ActTechnological and Legal Defenses Against Privacy Attacks on Machine Learning ModelsCalifornia Takes the Wheel: A Closer Look at Privacy in Connected Vehicles

Data Security

The Future of Construction: AI and Predictive Maintenance Part 1Tabletop Exercises as Risk Mitigation ToolsDoDIG Audit of Controlled Unclassified Information (CUI) Program: Findings and Next Steps for Contractors

European Privacy Regulations

Who Has My Data? EU Court Rules GDPR Requires Disclosure of Data Recipient Identities, Not Just Categories, in Response to Data Subject Access Requests2020 Brings Times of Change: Key Privacy Law Updates This Year

Facial Recognition Technology

Nothing Is Really Private, Until It Is Required to Be: Mississippi Legislature Proposes “Biometric Identifiers Privacy Act” to Protect Individual’s Personal InformationBiometric Privacy Law Expansions and Private Rights of ActionPrivacy at the Polls: Portland, Maine Votes to Ban Facial Recognition Technology

False Claims Act

Cybersecurity Enforcement Has Increased, and 2023 Will Be Worse!The Federal Government Focused on Cybersecurity, Among Other Sectors, in Enforcing the False Claims Act in 2022

Federal Agencies

Another Data Privacy Law? Colorado Enacts the Colorado Privacy ActEnergy and Infrastructure Companies Need to Know about the DOE’s and Other Agencies’ Focus on CybersecurityExecutive Order on Cybersecurity Sets Aggressive Timeline

Federal Trade Commission

Cybersecurity Enforcement Has Increased, and 2023 Will Be Worse!FTC Finalizes Updated Safeguards Rule Under GLBA to Dramatically Expand Data Security Requirements and Scope of RuleA Second Chance for the Public Health Emergency Privacy Act

FERPA

The Man Behind the Curtain: College Admissions and FERPA Requests

Fintech

A Fintech Leader’s Thoughts on the North Carolina Regulatory Sandbox ActTechnology Boom in NC? What You Should Know About the Proposed Regulatory Sandbox in the Tarheel StatePrivacy Litigation Updates for the Financial Services Sector: Claims Against Yodlee Survive and Limited Discovery of Envestnet Allowed

GDPR

Who Has My Data? EU Court Rules GDPR Requires Disclosure of Data Recipient Identities, Not Just Categories, in Response to Data Subject Access RequestsAnother Data Privacy Law? Colorado Enacts the Colorado Privacy ActPrivacy Moves to the East Coast: Virginia Set to Enact Comprehensive Consumer Data Protection Law

Global Privacy Control

California Announces Increased Scrutiny on CCPA Violations with Latest $1.2 Million Enforcement Action SettlementIntroducing… the Global Privacy Control

HIPAA / Electronic Health Information

Does the End Justify the Means? Privacy Advocates React to the Cooper Davis ActNew Florida Law Will Ban Offshoring of Certain Patient DataGovernor Approves CCPA Amendment to Further Except Healthcare and Research Information

Insurance Law Developments

Ransom Payment Debate Is Reminder to Stick to Cybersecurity FundamentalsFour New Cyber War Exclusions from Lloyd’s Market AssociationA Fintech Leader’s Thoughts on the North Carolina Regulatory Sandbox Act

Insurance Policy Applications

Four New Cyber War Exclusions from Lloyd’s Market Association3 Cyber Insurance Steps Critical to Cyber-Risk Management

Investigations/Enforcement

Cybersecurity Enforcement Has Increased, and 2023 Will Be Worse!Defense Contractor Denied FCA Summary Judgment in First Test of DOJ’s New Civil Cyber-Fraud InitiativeEnergy and Infrastructure Companies Need to Know about the DOE’s and Other Agencies’ Focus on Cybersecurity

Policies

How Smart Is Your Artificial Intelligence Policy?

Privacy Policy

Pet Stairs, Wiretapping, and Cookies: Implications of the Third Circuit’s Popa OpinionConnecticut Keeps the State Privacy Law Wave RollingAnother Data Privacy Law? Colorado Enacts the Colorado Privacy Act

Ransomware

Tabletop Exercises as Risk Mitigation ToolsHow a Zero-Day Flaw in MOVEit Led to a Global Ransomware Attack

Ransomware

Tabletop Exercises as Risk Mitigation Tools

Regulatory Supervision

Executive Order on Cybersecurity Sets Aggressive TimelineBiometric Privacy Law Expansions and Private Rights of ActionPrivacy Requirements under COVID-19 Emergency Rental Assistance Program

State Law Updates

Technological and Legal Defenses Against Privacy Attacks on Machine Learning ModelsCalifornia Takes the Wheel: A Closer Look at Privacy in Connected VehiclesDon’t Mess with Texas or Its Cybersecurity and Data Privacy Laws

U.S. Department of Health and Human Services (HHS)

Prepare Now For Sharing of and Access to Electronic Health Information: Cures Act Information Blocking and Interoperability Rules Take Effect June 30, 2020

Vendor Management

DoDIG Audit of Controlled Unclassified Information (CUI) Program: Findings and Next Steps for ContractorsFTC Eyes Vendor Oversight in Safeguards Rule Settlement

Workplace Privacy

3 Cyber Insurance Steps Critical to Cyber-Risk ManagementA New Privacy Headache: Virginia’s COVID-19 Workplace Safety Rule is Poised to Impact Privacy