Category: Policy & Legislation
Cooley Launches CCPA Resource Page
To help organizations understand and prepare for the California Consumer Privacy Act (CCPA), Cooley’s cyber/data/privacy team has launched a CCPA resource page, including FAQs, a compliance checklist, recordings of our CCPA webcasts, links to our CCPA blog coverage and more. We welcome your ideas for CCPA topics that you think […]
Significant GDPR enforcement action imminent
The EU General Data Protection Regulation (the “GDPR”) has been in force for just under a year now. Prior to its coming into effect, a key topic of concern for many companies was the ability of Supervisory Authorities (EU Data Protection regulators) to impose potentially enormous fines. In the run […]
CCPA Amendments: Expanded Private Right of Action Blocked; Exclusion of HR Data Advances
A number of bills seeking to amend the California Consumer Privacy Act of 2018 (CCPA) have been introduced this year, none more closely watched than SB 561, which would have extended the private right of action under the CCPA from security breaches to any violation of the CCPA. Despite support […]
The End of Auto Insurance As We Know It: How Big Data Will Reshape the Future of the Autonomous Vehicle Insurance Market
Despite the recent wave of articles forecasting that the rise of autonomous vehicles will lead to a decline in auto insurance premiums, we believe it is more accurate to say that the advent of self-driving cars will cause the personal auto insurance policy, as we know it, to disappear at […]
UK regulator focuses on GDPR challenges faced by the adtech industry
On 6 March 2019, the UK data protection regulator, the Information Commissioner’s Office (ICO) convened an adtech fact-finding forum of industry stakeholders, aimed at developing its understanding of the adtech ecosystem (with a particular focus on programmatic advertising and real-time bidding) and exploring key themes raised by adtech from a […]
FTC’s Proposed Amendments to the GLBA Safeguards Rule Seek to Incorporate Requirements from NY DFS Cybersecurity Regulations
On March 5, the FTC announced proposed amendments to the Standards for Safeguarding Customer Information under the Gramm-Leach-Bliley Act (“Safeguards Rule” or “Rule”). The FTC version of the Safeguards Rule applies to financial institutions that are not governed by federal banking regulators (e.g., FDIC, Federal Reserve, OCC, and NCUA) or […]
California Privacy Legislation Update
With the promulgation of the California Consumer Privacy Act of 2018 (“CCPA”), California has continued its role in pushing bleeding edge privacy and data security legislation. From the first data breach notification law back in 2003, to the first IoT data security law in 2018, it seems that California will […]
Brexit and its Possible Impact on Data Transfers
In its strictest construction, what ‘Brexit’ means is clear, what it entails and what comes next is absolutely not. Therefore, this article will not focus on matters relating to any such future relationship, but rather only on the terms on which the UK may leave the EU and how that […]
Cooley’s Michael Rhodes Joins 41 California Privacy Experts Urging Major Changes to the California Consumer Privacy Act
Michael Rhodes, chair of Cooley’s cyber/data/privacy practice, joins 41 California privacy lawyers, professionals and professors urging major changes to the California Consumer Privacy Act (CCPA). Led by Santa Clara University School of Law professor, Eric Goldman, the group is urging the legislature to address six significant issues posed by the […]
The Department of Health and Human Services Issues Guidelines on Cybersecurity
On December 28, 2018, the U.S. Department of Health and Human Services (“HHS”) released the “Health Industry Cybersecurity Practices (HICP): Managing Threats and Protecting Patients” publication (the “Cybersecurity Guidelines”), which provides voluntary cybersecurity practices designed to reduce security risks and improve security for various healthcare organizations. Specifically, the Cybersecurity Guidelines […]