FTC Settles with companies falsely claiming to comply with Safe Harbor

In January 2014 the Federal Trade Agency informed that twelve U.S. businesses agreed to settle after they falsely claimed to be abiding by the international privacy framework known as the U.S.-EU Safe Harbor. The U.S.-EU Safe Harbor enables U.S. companies to transfer consumer data between the United States and the European Union, in compliance with […]

In Re Matter of a Warrant, F.Supp. (S.D.N.Y. 2014)

On April 25, 2014 James Francis, Magistrate Judge of the Southern District of New York, held that all U.S.-based Internet, email, and on-line storage providers can be forced to hand over overseas data, if so requested by a U.S. government search warrant. The case itself addressed a search warrant issued to Microsoft for a customer’s […]

World Wide Web Consortium, Tracking Preference Expression (DNT)

The page describes the W3C work on Tracking Preferences and a Do Not Track Button. According to W3C “users need a mechanism to express their own preferences regarding tracking that is both simple to configure and efficient when implemented”.   Abstract “This specification defines the DNT request header field as an HTTP mechanism for expressing […]

The European Court of Justice held that national data protection authorities must be independent – Commission v Hungary (case C-288/12)

European Court of Justice (“ECJ”) held that Data Protection Directive 95/46/EC requires national supervisory authorities for the protection of personal data to operate with complete independence in the exercise of their duties. Hungary failed to fulfill such obligations by prematurely ending the term served by its national supervisory authority. Mr. András Jóri had been appointed […]

Federal Trade Commission v. Wyndham Worldwide Corporation, U.S. District Court for the District of New Jersey, case no. 13-cv-1887

On April 7, 2014, the District Court held that the Federal Trade Commission (“FTC”) has authority to bring an unfair trade practice claim involving data security without formally issuing regulations before bringing such claim. Defendants used a computer system that handled reservations and payment card transactions while storing consumers’ personal information, “including names, addresses, email […]

NCSL, National Conference of State Legislatures, Can employers ask for employees’ social network username and password?

The number of social media has increased tremendously during the last years. Is it ok for employers to ask their employees to turn over usernames or passwords for their personal accounts? Employers argue that access to personal accounts would protect proprietary information or trade secrets, help them comply with federal financial regulations, or prevent exposure […]