On January 2015, the World Economic Forum released a new framework designed to help businesses identify cyber threats and build potential quantification models to calculate the impact of these threats. The framework is called “cyber value-at-risk”. It is proposed with the report ‘Partnering for Cyber Resilience: Towards the Quantification of Cyber Threats’ and it was […]
The Justice Department has reached a $134,000 settlement with a New York woman after the Drug Enforcement Administration (“DEA”) set up a fake Facebook account in her name using seized pictures. The settlement takes into account emerging personal privacy concerns. Facebook had previously disabled the law enforcement agency’s fake profile. See here. Stipulation of the settlement […]
The Chilean government has just published an open consultation about its data protection bill. The text of the bill – which is expected to be a “European style” data protection law – will be published soon. More information are available in English here, and here, and in Spanish here and here Follow us on& Like us on
January 16, 2015: “We would like to keep you informed on progress of the amendments to the Federal Law № 242-FZ introducing amendments to the Federal Law “On personal data” and to the Federal Law “On information, information technologies and protection of information” (hereinafter – the “Law”) that has been adopted earlier on July 21, […]
New Jersey Bill no. 562 requires health insurers in the state to encrypt personal information stored in their system. Insurance carriers shall not maintain computerized records that include personal information, “unless that information is secured by encryption or by any other method or technology”. The requirement is stronger than what’s included in HIPAA, which considers encryption […]
On January 13, 2015, President Obama announced a New Cybersecurity Legislative Proposal and other cybersecurity efforts. The proposal – which the Congress will evaluate – increases the prosecution of cybercrimes and toughen penalties for them. It also encourages cybersecurity information sharing and proposes one federal statute for data breach reporting. More information available at http://www.whitehouse… […]
On November 12, 2014, the French data protection agency (“CNIL”) issued a new compliance pack (pack de conformité) for the insurance sector. The compliance pack is a new tool that the CNIL developed to aid professionals working in the insurance field in the application of the French data protection law. The pack de conformité is […]
On December 22, 2014, IIT Chicago-Kent College of Law released Digital Peepholes, a report documenting the risks of remote activation of webcams and proposing policy solutions. According to the report: Everyone is vulnerable to being spied on through their webcams. The FBI has asked that federal laws be changed so that law enforcement can use […]
On July 10, 2014, the Italian Data Protection Authority (“DPA”) issued a resolution to protect the privacy of Google’s services users in Italy. According to the decision, Google may not process users’ data for profiling without the subjects’ prior consent; furthermore, Google shall specifically inform the users that it is profiling them for marketing purposes. The […]
On December 31, 2014, the FTC approved a final order settling charges that Snapchat – a popular mobile messaging application – deceived consumers over the amount of personal data it collected and the security measures taken to protect data from misuse and unauthorized disclosure. The final order prohibits Snapchat from misrepresenting the extent to which it […]