Privacy and Information Security Law Blog Update

October 2024

This Client Alert is a monthly update on privacy and cybersecurity developments as posted on our Privacy & Information Security Law Blog. If you would like to receive email alerts when new posts are published, please visit our blog and enter your email address in the subscribe field.

Recent posts on the Privacy & Information Security Law blog include:

• SEC Fines Four Companies for SolarWinds-Related Cyber Incident Disclosure Failures
• UK ICO Publishes Response to Draft Data Bill
• Irish Regulator Fines LinkedIn 310 Million Euros for GDPR Violations
• CJEU Rules on Scope of Legitimate Interest Basis under the GDPR  
• U.S. Government Accountability Office Investigation Use of Retirement Plan Data for Cross-Selling Financial Products
• UK Introduces New Draft Data Bill
• DOJ Issues Notice of Proposed Rulemaking Limiting Bulk Transfers of Americans’ Sensitive Personal Data
• CFPB Finalizes Open Banking Rule, Challenge Follows Close Behind
• Second Circuit Revives Proposed Class Action under VPPA
• FTC Announces Final “Click-to-Cancel” Rule to Streamline Subscription Cancellation for Consumers
• NYDFS Tells Companies to Address AI Security Threats
• EDPB Adopts Guidelines on Scope of ePrivacy Directive
• Council of the European Union Adopts the Cyber Resilience Act
• New European Union Cybersecurity Rules Become Applicable
• CJEU Rules that Principle of Minimization Limits the Personal Data that Can Be Used for Targeted Advertising
• China Released Regulations on Administration of Network Data Security to Further Implement Cybersecurity and Protection of Personal Information
• Texas Attorney General Files Lawsuit Against TikTok Under SCOPE Act
• EDPB Adopts Opinion on Processors and Guidelines on Legitimate Interests  
• HHS Announces Settlement Agreement with Washington Chain of Eye and Skin Clinics Following Ransomware Investigation
• FTC and Coalition of State Attorneys General Announce Settlements with Marriot over Guest Data Breaches
• HHS Imposes Civil Penalty Against Interstate Network of Medical Providers Following Ransomware Attack
• UK ICO Launches New Data Protection Audit Framework
• FTC to Hold Workshop on Design Features that “Monopolize” Kids’ Time Online
• China Issues Guideline on Sensitive Personal Information