The EU regulators’ recent report on the second annual review of the EU-US Privacy Shield provides some valuable compliance reminders for organizations that have certified or intend to certify to the Privacy Shield program. The report, which mainly focuses on the EU regulators’ ongoing …›
The Commission nationale de l’informatique et des libertés (CNIL), France’s data protection authority (DPA), has levied a €50 million fine against Google for allegedly violating the GDPR’s transparency, information, and consent requirements in deploying targeted advertisements. The fine—the largest fine under GDPR to date …›
Despite increasing political tensions and evolving trade policies, the U.S. M&A market in 2018 enjoyed its second-best total deal value ever, according to Mergermarket. Activity through the first three quarters appeared poised for a new record, before slowing in the final quarter as stock …›
In a new stunning example of the scale and sophistication of online cybercrime, just before the holidays, DOJ charged two hackers with stealing hundreds of gigabytes of data—including sensitive intellectual property, confidential business data, and personal information from companies and government agencies around the …›
All Privacy Shield participants should be prepared — possibly as soon as March 30, 2019 — to update their Privacy Shield commitments in order to receive personal data from the UK in reliance on the EU-U.S. Privacy Shield Framework The timing of this required …›
Russia’s attack on the 2016 presidential election continues to command headlines but it’s only the latest incident of the U.S. being targeted by global adversaries in cyberspace, writes John P. Carlin, chair of Morrison & Foerster’s Global Risk + Crisis Management Group and co-chair …›
FDA is tackling cybersecurity threats head-on and expects industry to do the same. Earlier this month, FDA commissioner Scott Gottlieb, M.D., announced a series of developments designed to keep pace with evolving cybersecurity threats to medical devices. Industry should take note, as …›
Last week, the English High Court limited the availability of collective actions for data breaches to identifiable individuals who have suffered specific and discernible damage. In Richard Lloyd v Google LLC, the Court refused to allow a representative action alleging breach by Google of …›
When Governor Jerry Brown signed Assembly Bill 1906 and Senate Bill 327 into law on Friday, California took major strides toward regulating the Internet of Things, the network of internet‑connected devices that includes everything from televisions and cars, to refrigerators, fitness trackers, and baby …›
Just over a month after the EU General Data Protection Regulation (GDPR) took effect, California passed its own sweeping privacy legislation, the California Consumer Privacy Act of 2018. The Act stands to affect countless global companies doing business in California, many of which recently devoted …›