Chief executives of each of the Fortune 500 companies will soon receive a letter from Senator John D. Rockefeller IV (D-W.Va.) asking them to describe how their companies address computer network security, or “cybersecurity.” In the letter, Senator Rockefeller explains that he is addressing Fortune 500 companies directly because of the recent stalling of the Cybersecurity Act […]
Rep. Markey Introduces Mobile Device Privacy Act (H.R. 6377)
Rep. Ed Markey (D-MA) today introduced in the U.S. House of Representatives the “Mobile Device Privacy Act”, which was numbered H.R. 6377 and will be referred to the House Energy & Commerce Committee for further consideration. Congressman Markey serves as a member of the committee and Co-Chair of the Bi-Partisan Congressional Privacy Caucus. In his […]
FTC Publishes Guidance for Mobile App Developers
On September 5, 2012, The Federal Trade Commission (“FTC”) announced the publication of a guide (the “Mobile App Marketing Guide”) designed to assist mobile application (“app”) developers to observe truth-in-advertising and basic data privacy and security principles when promoting their technologies. For more than a decade, the FTC has examined consumer protection issues arising in conjunction with […]
New York Codifies New Social Security Number Protections
On August 14, 2012, Governor Andrew M. Cuomo signed a series of bills designed to enhance personal privacy protections and combat consumer fraud. A key piece of the legislative package safeguards Social Security Numbers by limiting their collection and dissemination to certain entities that have a public or practical interest in the information, including the state of […]
NIST Updates Computer Security Guidance and Additional Cyber-Security Guidance
On August 8, 2012, The National Institute of Standards and Technology (NIST) released a revised version of the Computer Security Incident Handling Guide (Security Guide) addressing the management of computer security incidents. The purpose of the Security Guide is to “assist organizations in mitigating the risks from computer security incidents by providing practical guidelines on responding to incidents effectively and […]