Alston & Bird Privacy, Cyber & Data Strategy Blog

New York Amends Data Breach Notification Law with Immediate Implications

By and

In late December 2024, the New York Governor signed two bills (S2659B and S2376B) amending the state’s data breach notification law (N.Y. Gen. Bus. Law § 899-aa), to expand the definition of reportable personal information and impose new covered entity reporting obligations in the event of a data breach. Effective immediately, companies will have 30 days from discovery of a covered breach to notify affected state residents, whereas the law previously required only that notice be made in “the … [Read more] about New York Amends Data Breach Notification Law with Immediate Implications

UK’s National Cyber Security Centre Releases 2024 Annual Review

By

The United Kingdom’s National Cyber Security Centre (NCSC) has released its Annual Review for 2024. As in prior years, the report covers the UK’s cyber security position, both in terms of threats to the public and private sectors, as well as the … [Read more] about UK’s National Cyber Security Centre Releases 2024 Annual Review

The D.C. Circuit’s TikTok Decision Could Portend Greater Regulation of Chinese-Owned Apps

By and

On December 6, 2024, the United States Court of Appeals for the D.C. Circuit upheld the constitutionality of the Protecting Americans from Foreign Adversary Controlled Applications Act (“Act”). The Act, signed into law by President Biden on April 24, … [Read more] about The D.C. Circuit’s TikTok Decision Could Portend Greater Regulation of Chinese-Owned Apps

CPPA Opens Formal Public Comment Period for CCPA Proposed Regulations

By and

On November 22, 2024, the California Privacy Protection Agency (the “CPPA”) issued a Notice of Proposed Rulemaking and opened the formal comment period for its proposed regulations on updates to existing California Consumer Privacy Act (the “CCPA”) … [Read more] about CPPA Opens Formal Public Comment Period for CCPA Proposed Regulations