Are thedarkoverlord’s victims entitled to damages from Athens Orthopedic Clinic? Georgia Supreme Court to rule.

Bill Rankin reports: In the spring of 2016, a cyber thief calling himself the “Dark Overlord” hacked into the databases of a Clarke County medical clinic and emerged with the personal information of an estimated 200,000 patients. The Athens Orthopedic … Continue reading Are thedarkoverlord’s victims entitled to damages from Athens Orthopedic Clinic? Georgia Supreme Court to rule.

New Notification Requirements in New York for Healthcare Providers Facing a Cybersecurity Incident

Frank J. Fanshawe, Joseph J. Lazzarotti, Jason C. Gavejian and Maya Atrakchi of JacksonLewis write: On August 12, Mahesh Nattanmai, New York’s Chief Health Information Officer, issued a notice letter (“the notice”) on behalf of the New York State Depar… Continue reading New Notification Requirements in New York for Healthcare Providers Facing a Cybersecurity Incident

New York Becomes Fifth State to Define a Breach to Include “Access” to Information

Daniel De Zayas, a legal intern at ZwillGen, writes: New York has updated its breach notification and data security law, expanding the definition of a data breach and imposing detailed reasonable security requirements, among other changes. The amendmen… Continue reading New York Becomes Fifth State to Define a Breach to Include “Access” to Information

Texas State Senator Jane Nelson’s cybersecurity bills signed into law

Chris Roark reports: Several bills authored by Texas State Sen. Jane Nelson, R-Flower Mound, that bolster state cybersecurity, expand the cyber workforce and better protect sensitive data have been signed into law by Gov. Greg Abbott. These bills will … Continue reading Texas State Senator Jane Nelson’s cybersecurity bills signed into law

Oregon Amends Data Breach Notification Law to Include Vendor Obligations; Expanded Definition of Personal Information

Daniel J. Moses of JacksonLewis writes: As we recently noted, Washington state amended its data breach notification law on May 7 to expand the definition of “personal information” and shorten the notification deadline (among other changes). Not to be o… Continue reading Oregon Amends Data Breach Notification Law to Include Vendor Obligations; Expanded Definition of Personal Information

Texas Moves Forward With Updates to Breach Notification Law and Institutes Privacy Council to Study Data Privacy Legislation

Will R. Daugherty and Caroline B. Brackeen of BakerHostetler write: Texas is one of the many states that looked to be following in the footsteps of California’s enactment of a broad consumer privacy law (the California Consumer Privacy Act), which has … Continue reading Texas Moves Forward With Updates to Breach Notification Law and Institutes Privacy Council to Study Data Privacy Legislation