Data Breach
-
More of the Same in the FTC’s Blackbaud Data Security Order
Four years ago—in early February 2020—Blackbaud, a software company that provides tools to schools, healthcare...
Alex Stout, Paul Rice
-
CCPA’s Statutory Damages Push More Breach Litigation to the Golden State
We had long predicted that the CCPA’s introduction of statutory damages associated with certain data...
Anna Hsia
-
The Carrot and The Stick: Trends and Considerations in the Equifax/FTC Settlement
Following a breach affecting 145 million consumers, the Federal Trade Commission has announced a settlement...
Jon Frankel, Kandi Parsons, Ariel Oxman
-
New York Becomes Fifth State to Define a Breach to Include “Access” to Information
New York has updated its breach notification and data security law, expanding the definition of...
Daniel de Zayas
-
New Reporting Requirements Under Arkansas’ Data Breach Law
Arkansas has updated its breach notification law to expand the definition of “personal information” and to require...
Michelle Anderson, Marci Rozen, Armin Tadayon
-
Washington Strengthens Breach Notification Law
On May 7, 2019, Governor Jay Inslee signed a bill (HB 1071) that strengthens the...
Michelle Anderson, Armin Tadayon, Jason Wool
-
The Death Knell for Class Arbitration?
On April 24, 2019, the U.S. Supreme Court held in Lamps Plus v. Varela that under...
Amanda Irwin, Jeff Landis
-
Massachusetts expands breach notice law to require 18 months credit monitoring
Massachusetts has updated its breach notification law to require credit monitoring services and more prescriptive...
Michelle Anderson
-
Ohio Provides Breach Litigation Safe Harbor to Businesses
Ohio has become the first state to enact legislation providing liability protection for businesses that...
Jason Wool
-
One-Day Breach Notification for Colleges and Universities?
Since at least fall of 2017, the Department of Education (“ED”) has expected institutions of...
Marci Rozen
