On May 13, 2015, Federal Trade Commission Chairwoman Edith Ramirez announced that the FTC will host an initiative for its “Start with Security” program in September. The FTC unveiled the “Start with Security” program in March at the IAPP Global Privacy Summit. During the unveiling, FTC Bureau of Consumer Protection Director Jessica Rich stated that […]
North Dakota Updates Data Breach Law
North Dakota recently amended its data breach notification law to clarify that the obligation to notify individuals of a breach applies to any entity that “owns or licenses” personal information of the residents of North Dakota. Previously, the obligation to report a breach only applied to those “that conduct[ ] business in the state.” In […]
Nevada Expands Definition of Personal Information In Data Security Statute
On May 13, Nevada Governor Brian Sandoval signed Assembly Bill 179, which expands the definition of personal information for purposes of Nevada’s data breach notification and data security law. Effective July 1, 2015, personal information will include an individual’s medical identification number or health insurance identification number and a user name, unique identifier or email […]
Visa Updates Global Compromised Account Recovery Program
On May 14, 2015, Visa announced several updates to its Global Compromised Account Recovery Program (“GCAR”), which helps card issuers recover costs and fraud losses after a data compromise. These modifications appear to be designed to address changes in the payment environment and align GCAR recoveries more closely with the current estimated costs and risks […]
Peter Swire on the History of Bulk Metadata Collection
Today, Peter Swire, Georgia Institute of Technology Scheller College of Business professor and senior counsel in Alston & Bird’s Privacy & Data Security Group, offers a historical primer on bulk data collection in this piece for the IAPP. Swire’s article follows two significant events in the past week potentially affecting the U.S. National Security Administration’s […]