HHS Publishes New Cybersecurity Resources
The U.S. Department of Health and Human Services (HHS) Office of Information Security recently published new cybersecurity resources with the goal of mitigating common cybersecurity threats in the health care sector. HHS Resources Webinars: Thes
Not Sneaky Enough: Google Pays $391.5M Privacy Violation Settlement
Written by: Savannah Liner Avera, Esq. Connecticut Attorney General William Tong announced a historic settlement with Google regarding its predatory disregard for users’ location tracking preferences. Google will pay $391.5 million to 40 state
Canada’s Consumer Protection Privacy Act (CPPA) at Least One Year Away
Written by: Richard Sheinis, Esq. Canada’s Federal Privacy Law, the Personal Information Protection and Electronics Documents Act (PIPEDA) is over 22 years old. Its replacement, proposed Bill C-27, which introduces the Consumer Protection Pr
European Union Considering a Complete Ban on Facial Recognition Technology
Written by: Gabriel Lopez, Esq. Earlier this month, European Union (EU) lawmakers began political debate on the EU’s Artificial Intelligence Act (AI Act). The legislation focuses on regulating the use of artificial intelligence in society. T
Snapchat Agrees to $35 Million Settlement with Illinois Residents
Written by: Gabriel Lopez, Esq. A $35 million settlement between the residents of Illinois and Snapchat has been reached following a class action lawsuit over the collection of biometric data. According to the complaint filed on May 11, 2022, fo
Virginia Amends the Virginia Consumer Data Protection Act (“VCDPA”)
Written by: Richard Sheinis, Esq. As many of you know, the VCDPA is scheduled to go into effect on January 1, 2023. In advance of the effective date, the Virginia Legislature has passed several amendments to the Act. The amendments are as fo
Shopify and Leger Facing Second Class Action Over 2020 Data Breach
Written by Joseph Stepina, Esq. Canadian e-commerce company, Shopify Inc., faces a new class action lawsuit over a 2020 data breach in which hackers were able to access personally identifiable information of over 270,000 individuals. Shopify con
The FTC’s Full-Court (Cafe)Press
Written by: Brock Wolf, Esq. Last month, the Federal Trade Commission (“FTC”) announced a proposed settlement with the online retailer of customized merchandise, CafePress. This settlement follows allegations that the company failed
Indiana Amends Its Data Breach Notification Law
Written by: Brock Wolf, Esq. Indiana Governor Eric Holcomb signed into law an amendment to Indiana’s data breach notification statute. The amendment, which takes effect on July 1, 2022, implements a forty-five (45) day deadline for reporti
Ransomware Group Conti Faces Data Leak of Its Own
Written by: Joseph Stepina, Esq. Notorious ransomware group Conti has, itself, been the target of cyberattacks after it announced its allegiance to Russia and its support of Russia’s ongoing invasion of Ukraine. Conti is famous for conductin