OCR Issues Guidance on Software Vulnerabilities and Patching
Written by: Anthony E. Stewart, Esq. Last month, the U.S. Department of Health and Human Services Office for Civil Rights (OCR) provided guidance regarding software vulnerabilities and patching. In simple terms, a software vulnerability is a
Wave of “GDPR like” Data Privacy Legislation continues with California’s Sweeping New Data Privacy Law
Written by: Richard Sheinis, Esq. On June 28, 2018 California legislators enacted the California Consumer Privacy Act of 2018, granting new protections for consumers’ online data. The law does not take effect until January 1, 2020. It can sti
GDPR Wave Hits the U.S.
Written by: Rich Sheinis, Esq. The wave of data protection that is the EU General Data Protection Regulation (“GDPR”) has hit the shores of the U.S. with states passing GDPR look-a-like legislation. All 50 states have data breach notificati
Dangerous Phishing Scam Targeting Employers This Tax Season
Written by: Anthony E. Stewart, Esq. The Internal Revenue Service (IRS) and state tax agencies are warning employers about one of the most dangerous phishing scams in the tax community. Cybercriminals are targeting organizations nationwide and
North Carolina Introduces New Data Breach Legislation
Written by: Richard Sheinis, Esq. On January 8, 2018, North Carolina Attorney General Josh Stein, and State Representative Jason Saine, proposed new data breach legislation entitled, “Act to Strengthen Identity Theft Protections” to update
Cyber Attack Quick-Response Checklist for HIPAA Covered Entities
Written by: Anthony E. Stewart, Esq. Ransomware attacks, like other cyber-attacks, are occurring more and more frequently, and healthcare entities are common targets. The U.S. Department of Health and Human Services Office for Civil Rights (O
PART 2: The European Union’s General Data Protection Regulation: Two Important Steps to Take
Featured on Hospitality Upgrade Magazine’s Tech Talk. Written by: Sam Crochet, Esq. In my June column, we discussed why the General Data Protection Regulation (GDPR) matters to the hospitality industry and the technical/organizational step
The European Union’s General Data Protection Regulation: What Steps Must Members of the Hospitality Industry Take?
Featured on Hospitality Upgrade Magazine’s Tech Talk. Written by: Sam Crochet, Esq. US companies collect, analyze, and leverage consumer data to optimize efficiency, advertise and, hopefully, increase profits. However, with the rise of data
Advice on Selecting a Data Protection Officer
Written by: Sean Cox, Esq. Having a single person responsible for a company’s data privacy and security has long been good business practice, but for many it will soon be a legal requirement. The GDPR requires that organizations under its aus
4th Circuit Severely Limits Data Breach Lawsuits
Written by: Sean Cox, Esq. A recent decision from the Federal 4th Circuit Court of Appeals is likely to make it much harder for plaintiffs within its borders bringing lawsuits following a data breach. In Beck v. McDonald1), the 4th Circuit Cou