Category Archives: Federal

HITECH Amendment Provides Some Protection For Covered Entities and Business Associates that Adopt Recognized Security Standards

Posted on by

Anna D. Kraus, Libbie Canter, Tara Carrier, and Olivia Vega of Covington & Burling write: On January 5, 2021, an amendment to the Health Information Technology for Economic and Clinical Health (“HITECH”) Act was signed into law.  The amendment requ… Continue reading HITECH Amendment Provides Some Protection For Covered Entities and Business Associates that Adopt Recognized Security Standards→

Data Analytics Company Settles with FTC Over Alleged Data Security Violations

Posted on by

Sheila A. Millar and Tracy P. Marshall of Keller & Heckman write: Third-party service providers are vital to many companies and they handle a wide range of business activities essential for companies to deliver their own offerings. But a company is… Continue reading Data Analytics Company Settles with FTC Over Alleged Data Security Violations→

FTC Announces Enforcement for Inadequate Third Party Risk Management Practices Under the GLBA’s Safeguards Rule

Posted on by

Hunton Andrews Kurth writes: On December 15, 2020, the Federal Trade Commission announced a proposed settlement with Ascension Data & Analytics, LLC, a Texas-based mortgage industry data analytics company (“Ascension”), to resolve allegations that … Continue reading FTC Announces Enforcement for Inadequate Third Party Risk Management Practices Under the GLBA’s Safeguards Rule→

Twitter Fine: a View into the Consistency Mechanism, and “Constructive Awareness” of Breaches

Posted on by

Mark Young, Shona O’Donovan and Paul Maynard of Covington & Burling writes about the recent news-making fine the DPC issued to Twitter.  They write, in part: Process aside, the DPC’s decision contains some interesting points on when a control… Continue reading Twitter Fine: a View into the Consistency Mechanism, and “Constructive Awareness” of Breaches→

Federal Financial Agencies Propose Requirement for Computer Security Incident Notification

Posted on by

A press release from the FDIC on December 18: Federal financial regulatory agencies today announced a proposal that would require supervised banking organizations to promptly notify their primary federal regulator in the event of a computer security in… Continue reading Federal Financial Agencies Propose Requirement for Computer Security Incident Notification→