The USA Freedom Act is law

On June 2, 2015, Congress passed the USA Freedom Act, which the same day was signed into law by President Obama. The USA Freedom Act reforms the authorities of the Federal Government to require the production of certain business records, conduct electronic surveillance, use pen registers and trap and trace devices, and use other forms […]

Tags: ,

Columbia Casualty v. Cottage Health System, i.e. when your cyber-insurance is not what it seems

  In Columbia Casualty Co. v. Cottage Health System, the insurer Columbia Casualty (“Columbia”), a unit of CNA, sued Cottage Health System (“Cottage”), which operates a network of hospitals located in Southern California, seeking to obtain a declaratory judgment that it was not obliged to defend or indemnify Cottage. Cottage had a NetProtect360 claims-made policy […]

Tags:

Data breach putative class action against Zappos dismissed for lack of standing because Plaintiffs did not allege they had suffer any harm

On June 1, 2015, the District Court of Nevada dismissed without prejudice for lack of standing a putative class action brought by data subjects whose personal information were stolen against Zappos. Zappos was targ eted by hackers and the personal identifying information of approximately 24 million of its customers were stolen. Shortly thereafter, a number […]

Tags:

Derivative action against officials of company whose customers’ personal data were stolen dismissed

On October 20, 2014, the District Court of New Jersey dismissed a shareholder’s derivative action against the officers of a Delaware company alleging breach of fiduciary duty in connection with three data breaches. The decision offers interesting inputs for companies’ officials with regard to potential data breaches’ risks and liabilities. This case involves a shareholder […]

Tags:

French DPA sent out formal letters of enforcement to about 20 companies which are not compliant with French cookie rules

On October 2014 the French Data Protection Authority (the CNIL) conducted an online audits to ascertain companies’ compliance with French cookie rules. As a result of that audit activity on June 30, 2015 the CNIL issued a press release stating that it has sent a “lettre de mise en demeure“ (formal letter of enforcement) to approximately 20 companies requesting […]

Tags: ,

An update from WP29 on the “right to be forgotten” in Europe

On June 18, 2015, the Article 29 Working Party (WP29) released a press statement to share the results of a survey launched to evaluate the EU practice regarding de-listing requests. A little more than one year ago the European Court of Justice (“ECJ) issued its famous”right-to-be-forgotten”decision in the Costeja case, C-131/12, holding that data subjects have […]

Tags: ,

European Court of Human Rights holds that owner of news portal can be held liable for defamatory comments posted by readers without violation of website’s freedom of expression

  On June 16, 2015, the Grand Chamber of the European Convention on Human Rights held that the owner of a news portal allowing for users comments can be held liable for defamatory comments therein posted by readers, and this will not be considered as a limitation of the website’s freedom of expression. Delfi AS vs […]

Tags:

Also in case of AML investigation, Italian police needs a warrant to search and seize privileged documents in a lawyer’s office, says the Italian National Bar

On request of a local bar, the Italian National Bar Association (Consiglio Nazionale Forense – CNF) opined that a lawyer can oppose the professional privilege to search and seizure of her clients’ files in the course of an anti-money laundering (AML) investigation by the competent enforcement authority (GDF) under Article 8 AML Law (powers of […]

Tags:

1 49 50 51 52 53 80