Privacy & Cybersecurity Newsletter

Locke Lord's Privacy & Cybersecurity Newsletter provides topical snapshots of recent developments in the fast-changing world of privacy, data protection, and cyber risk management. For further information on any of the subjects covered in the newsletter, please contact one of the members of our privacy and cybersecurity team.

In This Issue

CCPA

CCPA Quick Update: Certain Companies Must Report Consumer Request Metrics by July 1, 2021
If your business is subject to the CCPA and (alone or in combination) bought, received, sold, or ‎shared for commercial purposes the personal information of 10 million or more consumers ‎‎(i.e., California residents) in 2020, Section 999.317 of the CCPA Regulations requires you to ‎report metrics regarding consumer requests annually beginning July 1, 2021.‎ read more

Ransomware

Ransomware’s Scary – Be Wary and Ready to Parry
Ransomware is dominating headlines and creating unimaginable headaches. Ransomware has ‎been deployed against every industry sector, and against municipalities and other government ‎agencies.‎ read more

Updating Your “Reasonable Security” During the “Ransomware Outbreak”
‎“Reasonable Security” is a term that is becoming more important due to the continued increase ‎in ransomware incidents over the past few years, which the U.S. Cybersecurity and ‎Infrastructure Security Agency has described as the “ransomware outbreak.”‎ read more

HIPAA

Patients’ Right of Access Remains an Important Issue for HIPAA Compliance
Under the Health Insurance Portability and Accountability Act, individuals have the ‎right, with some limited exceptions, to access their protected health information ‎maintained in a designated record set by a covered entity or the covered entity’s business ‎associate. read more

Privacy

New York Biometric Privacy Update: Scanning Your Face As You Walk the City?
New York’s recent steps to protect biometric privacy are well worth your attention. The ‎‎“Biometric Identifier Information” Law was passed by the New York City Council and ‎will be effective July 9, 2021 in New York City. read more

Litigation

A Big Win for Walmart Helps Further Define the Scope of Data Breach Class Actions: Gardiner v. Walmart Inc.
Ever since the California Consumer Privacy Act took effect on January 1, 2020, ‎litigants have been looking forward to guidance regarding the limits of data breach claims. ‎Now some of the questions are starting to be answered. read more

Firmer Footing for Data Breach Standing, Thanks to the Second
Instead of identifying traditionally “tangible” injuries, data breach plaintiffs typically point to ‎the fact that they may be the victim of identity theft at some point in the future.‎ read more

Supreme Court Adopts Narrow Definition of TCPA Automatic Telephone Dialing System
Starting in 2003 when the FCC adopted an expansive interpretation of the definition of an “automatic telephone dialing system” that included most modern telephone equipment, the plaintiffs’ bar has extracted hundreds of millions of dollars from businesses through the Telephone Consumer Protection Act and the threat of uncapped statutory damages.‎ read more