Data breaches made headlines throughout 2024, affecting governments, health care groups, and telecoms. Follow-on litigation has kept pace. Nearly 4,000 class actions involving data privacy issues are estimated to be filed in federal courts by the end
Privacy & Data Security
Dec. 10 WEBINAR | Understanding your Obligations Under the EU Digital Operational Resilience Act (DORA)
The EU Digital Operational Resilience Act (DORA) takes effect Jan. 17, 2025, and will impact EU financial institutions and their providers of technology-related services (ICT Third Party Service Providers). This webinar will provide a practical overview of the obligations that will…
NYDFS settles with insurance companies over failures in their cybersecurity programs
On November 25, 2024, the New York State Department of Financial Services (“NYDFS”) announced it settled with two large insurance companies over allegations of inadequate data security practices in violation of New York’s cybersecurity regulation (23 NYCRR Part 500) (the…
Florida Healthcare Provider Faces $1.19M HIPAA Penalty Following Independent Contractor Breach
A healthcare provider delivering pain management services in Florida and other states faces a $1.19 million civil monetary penalty from the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR). The OCR investigation stems from…
Australia: Privacy Act amendments and Cyber Security Act become law
On 29 November 2024, the Australian Senate passed the Privacy and Other Legislation Amendment Bill 2024 (Cth) (the Privacy Act Bill). This follows the passage of the Cyber Security Act 2024 (Cth), and other cyber-security related amendments, on 25 November…
From McPrivacy to Mastery: A Collaborative Approach To Building Strategic Privacy Programs
@media screen and (max-width: 1023px){section[data-id=”block_d0939a824badf0f3768ffc8f05388f9b”]{ }}@media screen and (min-width: 1024px) and (max-width: 1365px){section[data-id=”block_d0939a824badf0f3768ffc8f05388f9b”]{ }}@media screen and (min-width: 1366px){section[data-id=”block_d0939a824badf0f3768ffc8f05388f9b”]{ }}
Alan Chapell is the President of Chapell & Associates, a law firm serving the interactive technology, media, and advertising industries. He…
First Tranche of Reforms to Australian Privacy Law Passed with Amendments
The first tranche of Australian privacy law reform has been passed by the Australian government and will come into effect within days. This reform further increases the range and type of penalties that Australia can enforce for non-compliance with local…
Unpacking the Proposed Data (Use and Access) Bill
The Data (Use and Access) Bill (“DUA Bill”)[1] had its second reading on 19th November 2024 after being introduced in the House of Lords on 23 October and the Bill is anticipated to enter the Lords’ Committee stage in…
GDPR Question: What Do You Do With a US Court Order?
So you have a court order from a U.S. court seeking data? In the words of Shania Twain, “That don’t impress me much!”
The European Data Protection Board recently issued an opinion on cross border transfers pursuant to Art 48…
Winter Is Coming and So Is Another Season of the Twelve Days of Data!
Over the next few weeks, Ropes & Gray’s data, privacy, and cybersecurity team will bring you unique blogs reviewing key trends and developments in data protection. This year, each daily blog will focus on a specific set of legal developments…