US

Key Takeaway: Organizations must conduct a fact-based analysis to determine whether health data collection and tracking technology deployed on their websites and mobile apps complies with the federal Health Insurance Portability and Accountability Act (“HIPAA”) and other applicable laws and guidance.

Cookies, web beacons, and similar technology are used to collect and analyze data

In case you missed it, below are recent posts from Consumer Privacy World covering the latest developments on data privacy, security and innovation. Please reach out to the authors if you are interested in additional information.

SEC Accused of Violating FOIA Deadlines for Documents on Improper Database Access | Consumer Privacy World

LinkedIn’s Data Scraping

The European Commission (the “Commission”) published today its draft adequacy decision for the US (the “Draft Decision”). This paves the way for an institutionalized personal data transfer mechanism across the Atlantic to emerge (and already raises the prospects of it being under scrutiny again).

If your pre- holidays’ workload (that also includes the transition of your old SCCs to the new ones, another transfer duty, does not allow you to read the full 134-page Draft Decision, here is a little tour of what you need to know before it becomes final (and this might still take some time).
Continue Reading Third Time Lucky or Schrems III? The European Union Data Pact with the US Moves One Step Closer (To Be Challenged – Again)

In case you missed it, below are recent posts from Consumer Privacy World covering the latest developments on data privacy, security and innovation. Please reach out to the authors if you are interested in additional information.

English Courts’ Stance on Low-Value Data Breach Claims Continues to Harden, But There May be Hiccups Along the Way

Welcome to the 2022 Q3 edition of the Artificial Intelligence & Biometric Privacy Report, your go-to source for keeping you in the know on all recent major artificial intelligence (“AI”) and biometric privacy developments that have taken place over the course of the last three months. We invite you to share this resource with your colleagues and visit Squire Patton Boggs’ Data Privacy, Cybersecurity & Digital Assets and Privacy & Data Breach Litigation homepages for more information about our capabilities and team.

Also, we are extremely pleased to announce that our own Kristin Bryan was named as a 2022 Law360 Cybersecurity & Privacy MVP. As Law360 notes, “[t]he attorneys chosen as Law360’s 2022 MVPs have distinguished themselves from their peers by securing hard-earned successes in high-stakes litigation, complex global matters and record-breaking deals.” You can read more about Kristin’s Law360 award here: Law360 MVP Awards Go to 188 Attorneys From 78 Firms.Continue Reading 2022 Q3 Artificial Intelligence & Biometric Privacy Report

In case you missed it, below are recent posts from Consumer Privacy World covering the latest developments on data privacy, security and innovation. Please reach out to the authors if you are interested in additional information.

Have You Updated Your French B2C T&Cs Yet? | Consumer Privacy World

FCC Acts to Protect Consumer Privacy from

In February of this year, Federal Communications Commission (“FCC”) Chairwoman Jessica Rosenworcel announced that she had submitted a proposal to her colleague Commissioners to regulate “ringless voicemails” to wireless phones under the Telephone Consumer Protection Act (“TCPA”). She noted that “‘[r]ingless voicemail can be annoying, invasive, and can lead to fraud like other robocalls—so it

CPW’s Kristin BryanScott Warren, and James Brennan will be key speakers at the Global Legal ConfEx on “GRC, Data Privacy & Cyber Security” on Thursday, November 17, 2022, in San Francisco.  
Continue Reading CPW’s Kristin Bryan, Scott Warren, and James Brennan to Speak at Conference on Data Privacy, Cybersecurity, and Governance, Risk & Compliance

On Monday, it was announced that the Federal Trade Commission (“FTC”) was taking action against education technology provider Chegg Inc. (“Chegg”) for its deficient data security practices that exposed the sensitive information of millions of its customers and employees, including Social Security numbers, email addresses and passwords.  According to the FTC, Chegg allegedly failed to fix problems with its cybersecurity despite experiencing four breaches since 2017.  This latest development is another reaffirmation of the FTC’s prioritization of privacy and security, as previously covered on CPW.
Continue Reading Ed Tech Company’s Four Data Breaches in Three Years Leads to FTC Enforcement Action

In case you missed it, below are recent posts from Consumer Privacy World covering the latest developments on data privacy, security and innovation. Please reach out to the authors if you are interested in additional information.

NOW AVAILABLE: Practical Guidance Podcast on “BIPA and Forthcoming Changes to Biometric Privacy Laws” ft. CPW’s Kristin Bryan |