Data Privacy

  • American Privacy Rights Act
    Image attribution tooltip
    Kevin Dietsch / Staff via Getty Images
    Image attribution tooltip

    Solution to patchwork of state data-privacy laws shows promise

    By mostly preempting state laws, the American Privacy Rights Act would give companies a much-needed roadmap for compliance, privacy specialists say.

    By Jessica Mach • April 12, 2024
  • A general view inside the European Parliament.
    Image attribution tooltip
    Christopher Furlong via Getty Images
    Image attribution tooltip

    EU lawmakers pass sweeping AI rules with global reach, stiff penalties

    Penalties include up to €35 million or 7% of a company’s total worldwide annual turnover — whichever is higher — for violations of a ban on “emotion recognition” in the workplace.

    By Alexei Alexis • March 13, 2024
  • Ryan McInerney with arms folded
    Image attribution tooltip
    Permission granted by Andy Gerit
    Image attribution tooltip

    Visa spends ‘billions’ battling cybersecurity threats

    The company is using generative artificial intelligence to thwart account-to-account fraud by way of Visa services.

    By Lynne Marek • March 11, 2024
  • CrowdStrike booth at RSA Conference in San Francisco.
    Image attribution tooltip
    Matt Kapko/Legal Dive
    Image attribution tooltip

    Cloud intrusions spiked 75% in 2023, CrowdStrike says

    Threat actors are targeting organizations’ inconsistent cloud security systems to intrude networks and maintain persistence.

    By Matt Kapko • Feb. 27, 2024
  • CCPA concept: a black computer keyword with a lock, a California shape and the text California consumer privacy act
    Image attribution tooltip
    Cristian Storto Fotografia via Getty Images
    Image attribution tooltip

    CalChamber seeks state Supreme Court review of privacy case

    The California Chamber of Commerce is advancing its argument that voters wanted a one-year gap between adoption and enforcement of updated regulations under the state’s landmark consumer privacy law.

    By • Feb. 22, 2024
  • legal role in data incident or breach
    Image attribution tooltip
    Just_Super via Getty Images
    Image attribution tooltip

    Old data is the scourge of most breaches

    Having a strict data retention policy can reduce the severity of a breach by limiting an organization’s most vulnerable information, breach response specialists say. 

    By • Feb. 21, 2024
  • Executives are seen speaking during a meeting.
    Image attribution tooltip
    AzmanL via Getty Images
    Image attribution tooltip

    Companies struggle with decarbonization due to internal governance, data issues

    Most organizations are committed to decarbonization, but a siloed approach, bureaucracy and data challenges stand in the way of success, an Engie report says.

    By Suman Bhattacharyya • Feb. 20, 2024
  • A white computer keyword with a lock, a California shape and the text California Consumer Privacy Act
    Image attribution tooltip
    Cristian Storto Fotografia via Getty Images
    Image attribution tooltip

    California privacy agency can enforce updated regulations, court rules

    Businesses are urged to review their privacy practices to make sure they are in compliance with all elements of the California Consumer Privacy Act.

    By • Feb. 14, 2024
  • A compliance and regulation concept
    Image attribution tooltip
    Parradee Kietsirikul via Getty Images
    Image attribution tooltip

    61% of organizations faced regulatory proceedings in 2023, report finds

    Survey respondents said state and federal regulatory changes are contributing to fears about increased exposure to regulatory disputes, according to Norton Rose Fulbright.

    By • Feb. 13, 2024
  • Multi colored spheres floating in an orange dimension grid
    Image attribution tooltip
    Permission granted by Relativity
    Image attribution tooltip
    Sponsored by Relativity

    The forward-thinking GC: Growing an in-house career with AI know-how

    If artificial intelligence can detect red flags for cancer on brain scans and manage air traffic, can it help in-house legal teams manage contract reviews and redact privileged information from a data set?

    Feb. 12, 2024
  • cybersecurity
    Image attribution tooltip
    2d illustrations and photos via Getty Images
    Image attribution tooltip

    Contractual obligations driving data privacy, cybersecurity upgrades

    To secure work from business partners, more companies are having to get serious about having the right technical and legal safeguards, a specialist says.

    By • Feb. 9, 2024
  • A class action complaint legal filing
    Image attribution tooltip
    Bill Oxford via Getty Images
    Image attribution tooltip

    Data breach class actions are on the rise, report finds

    The data breach cases also presented difficulties for the courts around issues of standing and uninjured class members, the Duane Morris report found.

    By • Feb. 6, 2024
  • EPIC US Pirg
    Image attribution tooltip
    kutubQ via Getty Images
    Image attribution tooltip

    State data privacy laws called toothless by public interest groups

    With the exception of California, states don’t allow a private right of action and companies can collect more data than they need, experts say.

    By • Feb. 2, 2024
  • Digital binary code on dark green background.
    Image attribution tooltip
    Getty Images via Getty Images
    Image attribution tooltip

    Law firm security breaches are fairly common, survey finds

    The tech decision-makers surveyed said improved training and technology would help their law firms become better prepared to address cybersecurity threats.

    By • Jan. 22, 2024
  • the exterior of the federal reserve building in washington, dc
    Image attribution tooltip
    crbellette via Getty Images
    Image attribution tooltip

    Fed bans ex-banker, fines 3 others over data handling

    A bank’s former CFO received more than 280,000 electronic documents — some containing confidential supervisory information — shortly after he was terminated from the bank in 2019, the Fed said.

    By Dan Ennis • Jan. 18, 2024
  • risk management
    Image attribution tooltip
    Parradee Kietsirikul via Getty Images
    Image attribution tooltip

    Importance of boards before, during and after a cyber incident

    The best practice is to get members of the board involved at the right time. 

    By • Jan. 11, 2024
  • Cloud computing technology internet on binary code with abstract background. Cloud Service, Cloud Storage Concept. 3D render.
    Image attribution tooltip
    Peach_iStock via Getty Images
    Image attribution tooltip

    Cloud concentration poses challenges for businesses, survey finds

    “The risk associated with cloud concentration is fast losing its ‘emerging’ status as it is becoming a widely recognized risk for most enterprises,” a Gartner director said.

    By • Jan. 10, 2024
  • data privacy, FTC
    Image attribution tooltip
    champpixs via Getty Images
    Image attribution tooltip

    FTC X-Mode settlement focuses on sensitive data

    The company must set up a system to ensure sensitive information, like where people live or get their healthcare, doesn’t get included in data it collects and sells.

    By • Jan. 10, 2024
  • in-house counsel 2024
    Image attribution tooltip
    new look casting via Getty Images
    Image attribution tooltip
    Deep Dive

    6 in-house legal trends to watch in 2024

    AI, labor, antitrust, bankruptcies, women GCs and cross-collaboration are among the headlines in-house counsel can expect this year.  

    By Lyle Moran and Robert Freedman • Jan. 9, 2024
  • Open AI, ChatGPT, copyright infringement
    Image attribution tooltip
    Mario Tama via Getty Images
    Image attribution tooltip

    NYT said to be using ChatGPT copyright suit as negotiating tactic

    The company is less interested in going to trial than generating licensing revenue from the use of its content in training GenAI tools, a tech specialist says.

    By • Jan. 3, 2024
  • Silhouette of several business people at a conference room table.
    Image attribution tooltip
    FangXiaNuo via Getty Images
    Image attribution tooltip

    Cyber risk strategies in hot seat as SEC rules go live

    The SEC wants to make sure companies are better prepared to mitigate material breaches, ransomware or nation-state espionage attacks.

    By David Jones • Dec. 21, 2023
  • A businessperson uses a laptop to search for information on a web browser
    Image attribution tooltip
    boonstudio via Getty Images
    Image attribution tooltip

    California privacy agency backs opt-out preference for consumers

    The regulator would like to see legislation requiring web browser vendors to make it easier for consumers to prevent the selling and sharing of their personal information.

    By • Dec. 19, 2023
  • A compliance and regulation concept
    Image attribution tooltip
    Parradee Kietsirikul via Getty Images
    Image attribution tooltip

    Regulatory compliance tops risk concerns for GCs, report finds

    Chief legal officers are also increasingly concerned about emerging data sources such as collaboration tools and chat applications, but feel unprepared to handle the associated risks. 

    By • Dec. 18, 2023
  • SEC headquarters
    Image attribution tooltip
    "U.S. Securities and Exchange Commission headquarters in Washington, D.C., near Union Station" by AgnosticPreachersKid is licensed under CC BY 3.0
    Image attribution tooltip

    3 tips for SEC cyber rule stragglers

    The Dec. 18 compliance deadline applies to all covered entities other than smaller reporting businesses, which will be subject to the breach reporting mandates as of June 5 of next year.

    By Alexei Alexis • Dec. 14, 2023
  • The front of the agency headquarters, reading "United States Security and Exchange Commission" and the number 450 as a man walks in a glass door at the bottom left of the frame.
    Image attribution tooltip
    Mark Wilson/Newsmakers via Getty Images
    Image attribution tooltip

    FBI to field SEC cyber incident disclosure delay requests

    Publicly-traded companies can request incident disclosure delays, but the bar is high. A filing would have to pose a significant threat to public safety or national security.

    By Matt Kapko • Dec. 12, 2023