Effectively managing security is no accident. Smart companies consider security upfront, assess their options and make good business choices based on the nature of their business and the sensitivity of the information involved. It is essential to focus on the…
Posts by Category: Data Protection & Privacy
Maine Enacts Social Media Protections for Applicants and Employees
Effective as of October 15, 2015, employers in Maine will be restricted in their ability to access the personal social media accounts of applicants and employees. Employers may not terminate, discipline or otherwise take adverse action against an employee, or reject…
Connecticut Passes New Data Protection Measures into Law
On July 1, 2015, Connecticut’s governor signed into law Public Act No. 15-142, An Act Improving Data Security and Agency Effectiveness (the “Actâ€), that (1) amends the state’s data breach notification law to require notice to affected individuals and the…
Liability for Data Breach Involving Employee Information: Even the Federal Government and Third Party Vendors Are Not Immune
Another class action has been filed alleging the disclosure of employee personally identifiable information due to a cyber attack. This time, the employer is the federal government, and another target in the lawsuit is the third party vendor allegedly used by the…
Final NIST Guidance Addresses Protection of Sensitive Data in Hands of Contractors
Final guidance (SP 800-171) from the National Institute of Standards and Technology on protecting sensitive federal information on nonfederal information systems “will prove important, perhaps profound, as the nation seeks to improve its cyber defenses,†said an…
FTC’s New Consumer Data Security Guidance Offers Businesses Practical Tips
The Federal Trade Commission has issued new guidance on data security for companies that collect, store and use consumer information, gleaned from the more than 50 enforcement actions brought by the agency over the past decade. The guidance, “Start with…
Data Privacy Challenges & Considerations for Cross-Border Ethics & Compliance Investigations
Investigations of potential misconduct can be taxing for any organization. But for organizations operating in multiple countries, the variability of data privacy laws around the globe present a special challenge. The stakes are high: if investigators violate data…
New York City Will Ban Employers From Viewing Credit History of Prospective Workers
The City Council is expected to pass a bill that will make it illegal for employers to check job-seekers’ credit history. In addition to banning credit reports on a prospective employee, the bill also prohibits employers from asking people what their credit…
Major FERPA Overhaul Under Consideration in U.S. House
A proposed overhaul of the country’s primary law protecting student-data privacy is being circulated for feedback, offering yet another sign of the federal government’s interest in reshaping the legislative landscape around this hot-button issue. The…
FTC Settles with Two Companies Falsely Claiming to Comply with International Safe Harbor Privacy Framework
Two U.S. businesses have agreed to settle FTC charges they falsely claimed they were abiding by an international privacy framework known as the U.S.-EU Safe Harbor, which enables U.S. companies to transfer consumer data from the EU to the US in compliance with EU law….




