Advertising & Marketing

California Attorney General Announces First CCPA Enforcement Action Focused on “Sales” of Personal InformationBusiness Privacy Law Lessons from Proposed Settlement with TwitterCalifornia Privacy Protection Agency (CPPA) Invites Comments on Proposed Rulemaking

Children’s Privacy

FTC Adopts Policy Statement Regarding Increased Scrutiny of COPPA Violations Involving Children’s PrivacyCalifornia Privacy Protection Agency (CPPA) Invites Comments on Proposed RulemakingCalifornia's CPRA ("CCPA 2.0") Likely to Pass with Majority of Votes Counted

Critical Infrastructure

NIST Releases Draft Report on Blockchain for Access Control Systems for Public CommentSenate Introduces Legislation Requiring 24-hour Ransomware NotificationFederal Agencies Warn of Attempted Hacking of U.S. Critical Infrastructure

Cryptocurrency

SEC Publishes Guidance on Disclosure Obligations Associated With Crypto Asset Markets

Customer Data Privacy

President Biden Issues Executive Order on Signals Intelligence to Implement EU-US Data Privacy FrameworkCalifornia Attorney General Announces First CCPA Enforcement Action Focused on “Sales” of Personal InformationBusiness Privacy Law Lessons from Proposed Settlement with Twitter

Cyber Attacks

NIST Releases Draft Report on Blockchain for Access Control Systems for Public CommentFinancial Regulators Issue New Cyber Incident Reporting Rule for U.S. Banks and Service ProvidersSenate Introduces Legislation Requiring 24-hour Ransomware Notification

Cyber Insurance

Cyber Insurance Found to Cover Fraudulent Wire TransferFederal Regulatory Agencies Issue Joint Guidance to Financial Institutions on Cyber InsuranceSEC Releases Guidance on Disclosures Concerning Cybersecurity Matters

Data Breach

NIST Releases Draft Report on Blockchain for Access Control Systems for Public CommentSenate Introduces Legislation Requiring 24-hour Ransomware NotificationPresident Biden Issues Executive Order on Cybersecurity

Education and Student Privacy

Vermont Amends Data Breach Notification Law, Enacts Student Privacy ActCould Your Website Be Collecting Information from Kids? Federal Trade Commission Issues 6-Step Plan for Complying with the Children’s Online Privacy Protection Act

Electric and Gas Utilities

Federal Agencies Warn of Attempted Hacking of U.S. Critical InfrastructureWhite House Issues Executive Order Restricting Foreign Equipment in Bulk Power SystemFERC and NERC Provide Industry Guidance to Ensure Grid Reliability Amid Potential Coronavirus Impacts

Financial Industries

White House Issues Executive Order on Ensuring Responsible Development of Digital AssetsFinancial Regulators Issue New Cyber Incident Reporting Rule for U.S. Banks and Service ProvidersMortgage Analytics Company and FTC Agree to Settlement on Allegations Related to Third-Party Vendor Data Breach

Government Contracts

President Biden Issues Executive Order on CybersecurityApple and Google Launch Contact Tracing and Coronavirus Exposure API SoftwareU.S. Senate Introduces COVID-19 Consumer Data Protection Act

Healthcare

House and Senate Democrats Introduce Public Health Emergency Privacy ActU.S. House of Representatives Introduces Contact Tracing Resolution and Grant AppropriationHHS Suffers Cyber Attack Meant to Slow Coronavirus Response, No Damage Done

Information Governance and Risk Management

President Biden Issues Executive Order on Signals Intelligence to Implement EU-US Data Privacy FrameworkBusiness Privacy Law Lessons from Proposed Settlement with TwitterNIST Releases Draft Report on Blockchain for Access Control Systems for Public Comment

International

President Biden Issues Executive Order on Signals Intelligence to Implement EU-US Data Privacy FrameworkWhite House Issues Executive Order on Ensuring Responsible Development of Digital AssetsBrazil's Data Protection Law (“LGPD”) Retroactively Effective

Internet of Things (IoT)

SEC Publishes Guidance on Disclosure Obligations Associated With Crypto Asset MarketsWhite House Issues Executive Order on Ensuring Responsible Development of Digital AssetsNIST Releases Draft Report on Blockchain for Access Control Systems for Public Comment

Labor and Employment

Kansas Federal District Court Rules Data Breach Allegations Sufficient for Standing After Spokeo

Litigation and Dispute Resolution

OCC Issues $400 Million Civil Penalty in Consent Order with Citibank Over Risk and Data GovernanceEquifax Will Pay Minimum of $575 Million, up to $700 Million, in Settlement Over 2017 Data BreachMiddle District of Alabama Denies Class Certification in Data Breach Claim Brought by Bank Against Retailer

Payment Card Industry (PCI DSS)

Middle District of Alabama Denies Class Certification in Data Breach Claim Brought by Bank Against RetailerTarget and States Resolve 2013 Data Breach Investigation with $18.5M Settlement

Privacy Policies

California Attorney General Announces First CCPA Enforcement Action Focused on “Sales” of Personal InformationFinancial Regulators Issue New Cyber Incident Reporting Rule for U.S. Banks and Service ProvidersCalifornia Privacy Protection Agency (CPPA) Invites Comments on Proposed Rulemaking

Telecommunications and Internet Service Providers

Apple and Google Launch Contact Tracing and Coronavirus Exposure API SoftwareEnsuring Data Security and Privacy During CoronavirusFCC Passes the “Restoring Internet Freedom” Order, Repealing Net Neutrality Rules and Restoring FTC Jurisdiction Over Online Consumer Protection

Transportation

NHTSA Releases Best Practice Guidelines for Vehicle Cybersecurity

Uncategorized

State Privacy Update: CPPA Files Proposed Final CPRA Regulations to OAL; Colorado and Other State Guidance Continue to EvolveState Legislatures Tackle Children’s Online Privacy, Continue to Introduce Comprehensive Consumer Privacy BillsCalifornia Attorney General Proposes Third Set of Modifications to CCPA Regulations

Vendor Management

California Attorney General Announces First CCPA Enforcement Action Focused on “Sales” of Personal InformationFinancial Regulators Issue New Cyber Incident Reporting Rule for U.S. Banks and Service ProvidersMortgage Analytics Company and FTC Agree to Settlement on Allegations Related to Third-Party Vendor Data Breach