Airline Sues to Stop Popular Web-Scraping Service–American Airlines v. The Points Guy

Kieran McCarthy writes: Those interested in web scraping legal issues had high hopes that the Supreme Court’s opinion in Van Buren v. United States last summer would provide clear guidelines on which types of online data access were permissible and whi… Continue reading Airline Sues to Stop Popular Web-Scraping Service–American Airlines v. The Points Guy

HIPAA: The Who: Plans, Providers, and Clearinghouses, and the First of the Rule of 3s.

With all the wildly erroneous claims made by people about what is covered by HIPAA, here’s a great explainer by attorney Jeff Drummond on exactly what kinds of entities ARE covered by HIPAA (Spoiler alert: yes, your local bar CAN ask you your vac… Continue reading HIPAA: The Who: Plans, Providers, and Clearinghouses, and the First of the Rule of 3s.

Hackers to face 25 years in jail for cyber attacks on Australia’s national infrastructure

Zach Marzouk reports: Hackers could face up to 25 years in jail if found guilty of cyber offences against Australia’s critical infrastructure, under proposed changes introduced by the government today. The government tabled the Crimes Legislation Amend… Continue reading Hackers to face 25 years in jail for cyber attacks on Australia’s national infrastructure

SEC’s breach notification proposal one step closer to a final vote

Tonya Riley reports: The Securities and Exchange Commission voted Wednesday 3-1 to approve a recommendation for tighter mandatory cybersecurity requirements for financial institutions. The proposed rule will now open to public comment before a final vo… Continue reading SEC’s breach notification proposal one step closer to a final vote

China Releases Draft Regulations on Network Data Security Management

Hunton Andrews Kurth writes: On November 14, 2021, the Cyberspace Administration of China (“CAC”) released for public comment its draft Regulations on Network Data Security Management (the “Draft Regulations”). The Draft Regulations are intended to imp… Continue reading China Releases Draft Regulations on Network Data Security Management

Revised Health Breach Notification Rule resources spell out companies’ legal obligations

Lesley Fair writes: Shoppers can find a plethora of apps, trackers, and sensors that hold or capture almost every conceivable form of personal health information. If your business or nonprofit offers products like that or provides certain services to e… Continue reading Revised Health Breach Notification Rule resources spell out companies’ legal obligations

The Governor Who Thinks Examining HTML Is Criminal Hacking Is Now Working To Make Missouri’s Public Records Laws Worse

I wasn’t sure which of my sites this post by Tim Cushing belongs on, so I’m posting it to both, because the public needs to see what the government is doing to erode transparency and rights. Tim writes: Missouri Governor Mike Parson is perh… Continue reading The Governor Who Thinks Examining HTML Is Criminal Hacking Is Now Working To Make Missouri’s Public Records Laws Worse

FCC Chairwoman Rosenworcel Circulates New Data Breach Reporting Requirements

 CHAIRWOMAN ROSENWORCEL CIRCULATES NEW DATA BREACH REPORTING REQUIREMENTS Proposal is a Response to Recent Security Breaches in the Telecommunications Industry   — WASHINGTON, January 12, 2022—Today Federal Communications Commission Chairwoman Je… Continue reading FCC Chairwoman Rosenworcel Circulates New Data Breach Reporting Requirements

FTC Finalizes Order with Mortgage Analytics Firm, Requiring it to Strengthen Security Safeguards, Increase Oversight of Vendors

In December, 2020, the FTC announced a proposed settlement with Texas-based Ascension Data & Analytics after a security breach involving one of its vendors resulted in the exposure of, and unauthorized access to, consumers’ mortgage applicati… Continue reading FTC Finalizes Order with Mortgage Analytics Firm, Requiring it to Strengthen Security Safeguards, Increase Oversight of Vendors