Inside Privacy

MAY 3, 2023

He opined that Member States’ law may not stipulate conditions going beyond those set out in the GDPR that make it more difficult to impute GDPR infringements to companies. Member States laws may not require this to be a pre-condition to impose a GDPR administrative fine. (2) companies).

State law 79

State law Court Data protection Law 79

Debevoise Data Blog

MAY 23, 2022

Connecticut’s Governor signed the state’s comprehensive privacy law into effect on May 10, 2022, adding yet another category of state privacy law. We also provide an overview of the CTPA’s enforcement mechanisms and explain how the CTPA modifies prior laws’ safe harbor with a nod towards prosecutorial discretion.

Law 40

Law Law Compliance Attorney 40

Debevoise Data Blog

JULY 12, 2022

The ADPPA aims to create a national framework that would preempt many, but not all, state privacy laws. It is unclear whether the ADPPA has sufficient support to become law, as it reportedly lacks key support in the Senate. Even if not enacted, its provisions are likely to influence a future federal privacy law.

State law 52

State law Federal law Compliance Data protection 52

Debevoise Data Blog

DECEMBER 22, 2023

This guidance, which draws on the GDPR as well as national and EU case law, contains relevant advice for using AI in the healthcare space more broadly. For example, the Garante notes the need to incorporate data protection by design and by default principles within any AI systems used in the healthcare space.

Data protection 52

Data protection Time-tracking Compliance Machine learning 52

Inside Privacy

JANUARY 4, 2024

The Order makes several notable changes to the prior rules, including broadening the definitions of a reportable “breach” and “covered data,” requiring covered entities to notify the FCC in addition to federal law enforcement of breaches, and modifying certain customer notification requirements. state data breach notification laws.

Data protection 79

Data protection Federal law State law Law 79

3 Geeks and a Law Blog

JULY 11, 2023

Ellington explains that the impetus for creating SessionGuardian came from working with a law firm to secure their work with eDiscovery vendors and contract attorney staffing agencies. Recently, a major North American bank told Leib that 10 of their last breach incidents were caused by unauthorized photography of sensitive data.

Law firm 189

Law firm Time-tracking Due diligence Attorney 189

Debevoise Data Blog

OCTOBER 26, 2021

This is Part 2 in a two-part series of articles about facial recognition laws in the United States. In this part, we assess where the law seems to be heading and offer some practical risk reduction strategies. Federal and State Legislation There is currently no federal law that specifically regulates biometric privacy.

Compliance 52

Compliance Federal law Data protection Machine learning 52

Legal Tech Monitor

JULY 11, 2023

Ellington explains that the impetus for creating SessionGuardian came from working with a law firm to secure their work with eDiscovery vendors and contract attorney staffing agencies. Recently, a major North American bank told Leib that 10 of their last breach incidents were caused by unauthorized photography of sensitive data.

Law firm 52

Law firm Time-tracking Due diligence Attorney 52

Debevoise Data Blog

OCTOBER 18, 2021

And what’s a company to do right now, with facial recognition opportunities presenting themselves today while the law remains a moving target? In this Part 1, we lay out the current laws governing facial recognition in the United States. The Patchwork of Current Facial Recognition Privacy Laws A.

Law 52

Law Law Court Time-tracking 52

Debevoise Data Blog

JULY 9, 2021

Colorado has just adopted a brand-new data privacy law and Nevada has just significantly amended its law. further in the direction of European-style privacy law. First, covered businesses would have to obtain “specific, informed, and unambiguous opt-in consent” to collect, use, share, or sell consumers’ personal data.

Data protection 40

Data protection Compliance Attorney State law 40

Debevoise Data Blog

JANUARY 14, 2022

5] In a motion passing 3-2 on a party-line vote, the Democratic commissioners removed the Chief Administrative Law Judge (the “ALJ”) from the role of Presiding Officer in Magnuson-Moss rulemaking; Chair Khan or her designee will instead assume the role of Presiding Officer, giving Chair Khan even greater control over future rulemaking efforts. [6]

Compliance 52

Compliance Court Litigator Litigation 52