Debevoise Data Blog

MAY 23, 2022

Like other state privacy laws, the CTPA contains a number of entity-based and data-based exemptions, including financial institutions covered by the Gramm-Leach-Bliley Act, national securities associations that are registered under the Securities Exchange Act of 1934, and data regulated by the Fair Credit Reporting Act, among other exemptions.

Law 40

Law Law Compliance Attorney 40

Debevoise Data Blog

OCTOBER 18, 2021

Failure to cure and notify could be costly: the law authorizes individuals to collect damages per violation plus attorneys’ fees. Notably, the law does not apply to the use of biometric identifiers “by government agencies, employees or agents.” Washington’s law does not require written consent.

Law 52

Law Law Court Time-tracking 52

Legal Tech Monitor

JULY 11, 2023

Ellington explains that the impetus for creating SessionGuardian came from working with a law firm to secure their work with eDiscovery vendors and contract attorney staffing agencies. Leib says attorneys must take responsibility for cyber defenses, not just rely on engineers. What really appealed to me about SessionGuardian.

Law firm 52

Law firm Time-tracking Due diligence Attorney 52

Debevoise Data Blog

JULY 12, 2022

Even if not enacted, its provisions are likely to influence a future federal privacy law. And, in many ways, the ADPPA may set a new minimum standard that will shape any state laws passed to fill the void left by the lack of a federal privacy law. We’ve previously written about the development of U.S. ADPPA § 302(a).

State law 52

State law Federal law Compliance Data protection 52

Debevoise Data Blog

OCTOBER 26, 2021

It would also prohibit disclosure of such data, with limited exceptions. The bill would provide for a private right of action that allows consumers to obtain damages of no less than $5,000 per violation, as well as attorneys’ fees. Have individuals received notice that their biometric identifiers are being collected?

Compliance 52

Compliance Federal law Data protection Machine learning 52

Debevoise Data Blog

JULY 9, 2021

further in the direction of European-style privacy law. Colorado and Nevada join California and Virginia in adding to the growing patchwork of disparate state laws — making it that much harder for any business seeking to have a single privacy program that is compliant everywhere.

Data protection 40

Data protection Attorney Compliance State law 40

Debevoise Data Blog

JANUARY 14, 2022

The FTC even recently imposed individual liability on in-house counsel, but one Commissioner emphasized that the attorney was named based upon his actions while functioning in a business capacity rather than as an attorney. [21] He noted, however, that if the law was not sufficiently strong, he may be opposed to outright preemption.

Compliance 52

Compliance Court Litigator Litigation 52