The Securities and Exchange Commission (“SEC”) has sanctioned an investment adviser and fined it $75,000 for failing to “adopt written policies and procedures reasonably designed to protect customer records and information.” The SEC alleges that this failure, which was a violation of its Safeguards Rule, contributed to a cyber attack against the investment adviser that […]
Peter Swire and Dominique Shelton Speaking at IAPP 2015 Privacy. Security. Risk. Conference
Peter Swire and Dominique Shelton will be featured speakers at the International Association of Privacy Professionals (IAPP) 2015 Privacy. Security. Risk. Conference, hosted by the IAPP Privacy Academy and CSA Congress. The conference will be held in Las Vegas on September 28-October 1, 2015. Leading innovators and practitioners in the field will be covering various topics relating […]
Safe Harbor Framework in Jeopardy after Advocate General Decision
Today, Advocate General Yves Bot advised the European Court of Justice that the US-EU Safe Harbor framework for the protection of trans-Atlantic transfers of personal data is invalid. The long awaited Opinion of the Advocate General in the so-called “Schrems case” (Case C-362/14 Maximilian Schrems v. Data Protection Commissioner) has now been published. The case […]
SEC Provides Additional Information On Cybersecurity Examinations
On September 15, 2015, the Security and Exchange Commission’s Office of Compliance Inspections and Examinations (“OCIE”) issued a Risk Alert to provide additional information on the areas of focus for its second round of cybersecurity examinations. The OCIE’s initial cybersecurity examinations in 2014 were to identify cybersecurity risks and assess cybersecurity preparedness in the securities […]
Third Circuit Affirms FTC’s Authority to Regulate Data Security
On August 24, 2015, the Third Circuit affirmed U.S. District Court Judge Esther Salas’ April 2014 ruling in FTC v. Wyndham Worldwide Corp., et al. (“Wyndham”) that the FTC has the authority to regulate private companies’ cybersecurity practices under Section 5 of the FTC Act. (Prior blog posts on this case can be found here […]