Pennsylvania Court Holds Employer Liable For Breach Of Employees’ Personal Information
Written by: Richard Sheinis, Esq. In a recent case, Dittman v. The University of Pittsburgh Medical Center, the Pennsylvania Supreme Court found that the Medical Center owed a duty to their employees to exercise reasonable care in collecting an
Canada’s Breach Notification Rules Go Into Effect Nov. 1
Written by: Anthony E. Stewart, Esq. Any organization subject to Canada’s Personal Information Protection and Electronic Document Act (PIPEDA) will have new data breach notification rules to follow starting tomorrow. This change will affect b
Brazil’s General Data Privacy Law Goes Into Effect in 2020
Written by: Anthony E. Stewart, Esq. Brazil is one of the latest countries to implement comprehensive data privacy regulation. Brazilian President Michel Temer recently signed into law the General Law of Protection of Personal Data, which goes
Dangerous Phishing Scam Targeting Employees’ Direct Payroll Deposits
Written by: Anthony E. Stewart, Esq. The Federal Bureau of Investigations (FBI) has issued a warning about a phishing scam that is targeting employees who receive their paychecks by direct deposit. Cybercriminals are targeting the online payr
HHS Issues Guidance on Disposing of Electronic Devices and Media with Personal Data
Written by: Anthony E. Stewart, Esq. The U.S. Department of Health and Human Services Office for Civil Rights (OCR) has issued guidance for disposing of technology that contains sensitive information, such as financial or protected health i
Georgia Court of Appeals Makes First Foray Into Standing in Data Breach Suits
Written by: Sean Cox, Esq. On June 26, 2017, the Georgia Court of Appeals issued an opinion in Collins, et al. v. Athens Orthopedic Clinic, A18A0296. This is the first Georgia appellate decision squarely addressing the issue of standing in a
OCR Issues Guidance on Software Vulnerabilities and Patching
Written by: Anthony E. Stewart, Esq. Last month, the U.S. Department of Health and Human Services Office for Civil Rights (OCR) provided guidance regarding software vulnerabilities and patching. In simple terms, a software vulnerability is a
Wave of “GDPR like” Data Privacy Legislation continues with California’s Sweeping New Data Privacy Law
Written by: Richard Sheinis, Esq. On June 28, 2018 California legislators enacted the California Consumer Privacy Act of 2018, granting new protections for consumers’ online data. The law does not take effect until January 1, 2020. It can sti
GDPR Wave Hits the U.S.
Written by: Rich Sheinis, Esq. The wave of data protection that is the EU General Data Protection Regulation (“GDPR”) has hit the shores of the U.S. with states passing GDPR look-a-like legislation. All 50 states have data breach notificati