AU: Breach notification rules for new government data scheme, but no consent for sharing

Rohan Pearce reports: New legislation that will enable data collected by public sector agencies to be more easily shared is expected to be accompanied by new rules for data breach notifications, a discussion paper released today by the government said…. Continue reading AU: Breach notification rules for new government data scheme, but no consent for sharing

Rajya Sabha passes Aadhaar amendment Bill, allows to file complaint in case of security breach

Siraj Qureshi reports: The Rajya Sabha on Monday passed the Aadhaar and Other Laws (Amendment) Bill, 2019 that will allow the voluntary use of the 12-digit identification number as identity proof for Indians to open bank accounts and also get a mobile … Continue reading Rajya Sabha passes Aadhaar amendment Bill, allows to file complaint in case of security breach

Legislation Seeks to Regulate Privacy and Security of Wearables and Genetic Testing Kits

Lindsey Tonsager, Anna D. Kraus and Jayne Ponder of Covington & Burling write: Last week, Senators Amy Klobuchar (D-MN) and Lisa Murkowski (R-AK) introduced the Protecting Personal Health Data Act (S. 1842), which would provide new privacy and secu… Continue reading Legislation Seeks to Regulate Privacy and Security of Wearables and Genetic Testing Kits

The CMMC – A Palatable Enforcement Solution to DFARS Requirement?

My colleagues and I have been warning about the Department of Defense’s (DoD’s) looming enforcement of DFARS clause 252.204-7012 for a while now, as many Tripwire customers handle government CUI. Inevitably, we are asked how long we think i… Continue reading The CMMC – A Palatable Enforcement Solution to DFARS Requirement?

District Court Finds no CFAA Violation where Employee Shares Confidential Company Information with Competitor

Jason C. Gavejian and Maya Atrakchi of JacksonLewis write: A district court in Tennessee recently concluded in Wachter Inc. v. Cabling Innovations LLC that two former employees who allegedly shared confidential company information found on the company’… Continue reading District Court Finds no CFAA Violation where Employee Shares Confidential Company Information with Competitor

China Released Core National Standards, Updating Mandatory Cybersecurity Requirements under the Cybersecurity Multi-level Protection Scheme

Yan Luo, Ashden Fein and Zhijing Yu of Covington & Burling write: On May 13, 2019, China’s State Administration for Market Regulation (“SAMR”) released three core national standards related to the country’s Cybersecurity Multi-level Protection Sche… Continue reading China Released Core National Standards, Updating Mandatory Cybersecurity Requirements under the Cybersecurity Multi-level Protection Scheme