Breach Laws, Federal, Non-U.S., Of Note
Siraj Qureshi reports: The Rajya Sabha on Monday passed the Aadhaar and Other Laws (Amendment) Bill, 2019 that will allow the voluntary use of the 12-digit identification number as identity proof for Indians to open bank accounts and also get a mobile phone connection. Aadhaar, a 12-digit unique identification number issued to Indian citizens...
Legislation Seeks to Regulate Privacy and Security of Wearables and Genetic Testing Kits
Federal, Health Data, Legislation, U.S.
Lindsey Tonsager, Anna D. Kraus and Jayne Ponder of Covington & Burling write: Last week, Senators Amy Klobuchar (D-MN) and Lisa Murkowski (R-AK) introduced the Protecting Personal Health Data Act (S. 1842), which would provide new privacy and security rules from the Department of Health and Human Services ("HHS") for technologies that collect personal...
Understanding When Business Associates Are Directly Liable Under HIPAA
Breach Laws, Federal, Health Data, U.S.
Aimee Jachym and Samantha A. Kopacz of Miller Canfield PLC write: New guidance issued by the U.S. Department of Health & Human Services (HHS) Office for Civil Rights (OCR) reaffirms that business associates must have proper HIPAA compliance practices, safeguards and documentation in place in order to avoid costly penalties. OCR recently released a...
District Court Finds no CFAA Violation where Employee Shares Confidential Company Information with Competitor
Commentaries and Analyses, Federal, Insider, Of Note, U.S.
Jason C. Gavejian and Maya Atrakchi of JacksonLewis write: A district court in Tennessee recently concluded in Wachter Inc. v. Cabling Innovations LLC that two former employees who allegedly shared confidential company information found on the company's computer system with a competitor did not violate the Computer Fraud and Abuse Act (CFAA). The CFAA...
China Released Core National Standards, Updating Mandatory Cybersecurity Requirements under the Cybersecurity Multi-level Protection Scheme
Commentaries and Analyses, Federal, Non-U.S.
Yan Luo, Ashden Fein and Zhijing Yu of Covington & Burling write: On May 13, 2019, China's State Administration for Market Regulation ("SAMR") released three core national standards related to the country's Cybersecurity Multi-level Protection Scheme ("MLPS"), describing technical and organizational controls that companies must follow when complying with MLPS-related obligations under the Cybersecurity...
Northwest Indian College suffered major file loss in Ryuk ransomware incident
Lyon County School District hacked in latest cyber attack against local agencies
Hospital fined €460,000 for privacy breaches after Barbie case