David Ries, Security

ABA Techreport 2014 Conclusion from the article: “The 2014 Legal Technology Survey Report provides a good roadmap of what attorneys and law firms are doing to protect information. Those who are behind the reporting attorneys on safeguards should evaluate their security posture to determine whether they need to do more to provide competent and reasonable […]

Katherine Jo Strandburg, Membership Lists, Metadata and Freedom of Association’s Specificity Requirement

10 ISJLP 327 (2014) Abstract: “Revelations of massive aggregation of telephone call records by the NSA have led to widespread debate about the legality, effectiveness, and normative desirability of such broad-based government data collection. This article contends that mass collection of so-called “metadata” as a means to investigate associations impinges on the First Amendment right […]

Google challenges decision allowing UK data subjects to sue it in England for cookies violations

On December 8, 2014, the UK Court of Appeal began hearing Google’s appeal against the High Court’s decision which allowed UK data subjects to sue Google Inc. in England for misuse of private information. In brief, at the beginning of 2013, several claimants alleged that Google used cookies to track their browsing activity without their consent. […]

California amendments to privacy law to entered into effect on January 1, 2015

Senate Bill n. 1710 amended sections 1798.81.5, 1798.82, and 1798.85 of California Civil Code. Cal. Civ. Code §§ 1798.81.5, 1798.82, and 1798.85 (personal information privacy) will go into effect on January 1, 2015. The amendments enhanced the protection of California residents’ personal information by: requiring the entity notifying a data breach to provide appropriate identity theft prevention […]

Employer held responsible for employees HIPAA privacy violation

On November 14, 2014, the Court of Appeals of Indiana found a pharmacist and her employer liable for the damages sustained by a customer as a result of the pharmacist’s HIPAA breach. The pharmacist breached one of her most sacred duties by viewing the prescription records of a customer without consent and for personal purposes and […]

TRUSTe settles with FTC after being accused of failing to update privacy certifications

On November 17, 2014, TRUSTe and the FTC announced a proposed consent agreement after TRUSTe allegedly deceived consumers about its recertification program for the company’s privacy practices. TRUSTe is a corporation which offers several data privacy services to companies, including a variety of assessments and certifications, monitoring tools, and compliance controls. It also offers Certified […]