Data Breach Litigation – A Web of Federal and State Laws. Part Two

The Target breach illustrates the breadth of applicable state laws when a data breach affects a large company. On December 19, 2013, Target announced that it had been the victim of a criminal attack on its computer network by third-party intruders who stole payment card data and other personal information from Target shoppers who shopped at Target […]

Data Breach Litigation – A Web of Federal and State Laws. Part One

The news has been saturated lately by stories of data breaches. The IRS discovered recently that a breach of citizens’ tax return information covered more than 330,000 taxpayers, three times that originally identified in May of this year. Target’s data breach in 2013 is back in the news because the company just settled claims against it by […]

BBC News and attempts to use the right to be forgotten to forget the past

We’ve blogged before on the right to be forgotten including our original blog on the European Court of Justice Ruling in May here, our report from the Google Advisory Council meeting in October here and our blog on the European Data Protection Commissioner’s Guidelines in November here. The right to be forgotten is back in […]

Columbia Casualty v. Cottage Health System, i.e. when your cyber-insurance is not what it seems

In Columbia Casualty Co. v. Cottage Health System, the insurer Columbia Casualty (“Columbia”), a unit of CNA, sued Cottage Health System (“Cottage”), which operates a network of hospitals located in Southern California, seeking to obtain a declaratory judgment that it was not obliged to defend or indemnify Cottage. Cottage had a NetProtect360 claims-made policy with […]

Cookies: ten things to consider

Nowadays in Italy there is a big debate on “cookies”. Starting on June 3, 2015, data controllers shall implement the requirements issued by the Italian Data Protection Authority (Garante) with  Decision no. 229 of 8 May 2014 “Simplified Arrangements to Provide Information and Obtain Consent Regarding Cookies” (Published in the Official Journal no. 126 of […]

General Law of Transparency and Access to Public Information

On May 5, 2015, the Mexican Federal Government published in the Official Gazette of the Federation the decree that issues the General Law of Transparency and Access to Public Information, which its main purpose include the following: Distribute authorities between the guarantor bodies of the Federation and the Federal States with respect to transparency and […]

EU Data Protection Regulation FAQs

What is this all about? The EU is in the process of reforming its existing data protection rules. Unfortunately these reforms are currently subject to significant delay. But despite this set-back Cordery strongly recommends that businesses keep an eye firmly on the ball as the reforms go well beyond an upgrade – good planning ahead […]

Blog: When will the new European data laws come in?

One of the most frequent questions we have at the moment is from clients asking us when the new EU data protection laws will come in. Needless to say there is no definite answer. In May 2014 we looked at what the proposed new laws say and some of the history behind them. You can […]