On April 14, 2021, the New York Department of Financial Services ("NYDFS") announced a settlement with National Securities Corporation (“National Securities”), a licensed insurer, in connection with claims under the NYDFS Cybersecurity Regulation (23 … [Read more] about NYDFS Announces Cybersecurity Settlement, Addresses Multi-Factor Authentication Rules
The GDPR Reaches the US Supreme Court in Cert Petition
The EU’s General Data Protection Regulation (GDPR) has been raised in a petition for certiorari before the US Supreme Court, apparently for the first time since the GDPR entered into application in 2018. A party in Vesuvius USA Corp. v. Phillips has … [Read more] about The GDPR Reaches the US Supreme Court in Cert Petition
Another Court Dismisses Data Breach Class Action Lawsuit for Lack of Standing
In what appears to be a growing trend, another federal district court has dismissed a data breach case for lack of standing. In Springmeyer et al. v. Marriott International, Inc., 2021 WL 809894 (D. Md.), Plaintiffs, former guests of Marriott hotels, … [Read more] about Another Court Dismisses Data Breach Class Action Lawsuit for Lack of Standing
NYDFS Reports Major Cybersecurity Settlement
In early March, the New York Department of Financial Services (NYDFS) announced a settlement involving a $1.5M penalty and mandatory remediation in response to a mortgage lender’s alleged failure to report a cyber breach, and other alleged … [Read more] about NYDFS Reports Major Cybersecurity Settlement
Virginia Becomes First State with Comprehensive Privacy Law after CCPA
Yesterday, Virginia became the second state after California to pass a comprehensive privacy law when Governor Ralph Northam signed the Consumer Data Protection Act (CDPA). The CDPA contains many elements found in the California Consumer Privacy Act … [Read more] about Virginia Becomes First State with Comprehensive Privacy Law after CCPA