The European Commission has released its final draft proposal for comprehensive reform of data protection standards in the European Union. This draft of a proposed new General Data Protection Regulation (the “Regulation”) is largely consistent with the earlier draft that was the subject of a post on this blog dated December 5, 2011. But there are […]
Draft Regulation Prepared by the European Commission Proposes Fundamental Changes in European Union Privacy and Data Security Standards
The European Commission has prepared and circulated a draft new General Data Protection Regulation (the “Regulation”). The draft is consistent with many of the expectations the Commission set in its November, 2010, communication titled, “A Comprehensive Approach on Personal Data Protection in the European Union,” and in public statements since made by EU policymakers. The […]
House Committee on Intelligence Overwhelmingly Passes Cybersecurity Legislation
Yesterday, the House Intelligence Committee passed H.R. 3523, the Cyber Intelligence Sharing and Protection Act of 2011, by a nearly unanimous vote of 17-1. The legislation, which was introduced Wednesday by Committee Chairman Mike Rogers (R-MI), with the support and cosponsorship of a bipartisan group of 28 House members, would provide for sharing of certain […]
Facebook Agrees To Privacy Changes As A Result Of FTC Settlement
On November 29, the Federal Trade Commission announced that it had entered an agreement and consent order with Facebook Inc. to settle charges made by the FTC that Facebook’s changes to its website’s privacy settings in December 2009 had threatened the “health and safety” of Facebook’s users. As alleged in the FTC’s complaint, Facebook’s 2009 […]
OCR’s HIPAA Privacy & Security Audit Program Pilot Underway
The pilot phase of the HHS Office for Civil Rights (OCR) HIPAA Privacy and Security Audit Program is now underway through December 2012. Background. Under HITECH Act § 13411, 42 USC § 17940, HHS is required to provide for periodic audits to ensure that HIPAA covered entities and their business associates are complying with the […]