Two cases before the Illinois Supreme Court could serve as precedent for determining insurance companies’ exposure when their clients violate the state Biometric Information Privacy Act, Insurance Newsnet reports. The first case, Cothron v. White Castle System, Inc., would determine if BIPA violations occur on a “per-scan” basis each time an individual submits to a biometric scan. The other case, The Tims v.
The U.S. Federal Trade Commission's privacy and data security rulemaking proposal could prove to be a lofty undertaking despite some advanced planning. IAPP Westin Emeritus Fellow and Goodwin Procter Partner Omer Tene said the broad nature of the agency's recently issued Advance Notice of Proposed Rulemaking brings part risk and opportunity.
The European Data Protection Board issued a binding decision under the EU General Data Protection Regulation's Article 65 dispute resolution mechanism related to a 600,000 euro fine handed down by France's data protection authority, the Commission nationale de l’informatique et des libertes. The Article 65 procedure was triggered by concerned supervisory authorities' issues with the proposed sum of the CNIL fine.
The U.K. Department for Digital, Culture, Media and Sport published its qualitative report detailing the experiences of organizations that suffered a data breach. The report titled “Exploring Organisational Experiences of Cyber Security Breaches” was commissioned in January by the DCMS.
U.S. Reps. Jerrold Nadler, D-N.Y., and Bennie Thompson, D-Miss., issued a letter to seven federal law enforcement agencies inquiring about alleged purchases of Americans’ data, Gizmodo reports.
Text messages may not be secure enough for two-factor authentication, The Wall Street Journal reports. Texts, or SMS messages, were previously a “maintenance communication channel between cell towers and phones” but were widely adopted by consumers who learned they could send texts to other cell customers. Today, hackers can utilize SMS messages to launch phishing attacks and SIM card swapping, where hackers clone a cellphone and can read texts sent to a cellphone.
The Philippines’ National Privacy Commission issued guidance on how the agency issues the Circular on Administrative Fines for data privacy violations. The fines are intended to be “proportionate and dissuasive of data privacy infractions.” Privacy Commissioner John Henry Naga said, “The National Privacy Commission is intensifying its efforts in order for personal information controllers and processors to adopt optimal levels of data protection and security.
The IAPP is accepting submissions for the next iteration of the "Privacy Tech Vendor Report" expected to be released in October. Vendors seeking inclusion in the report and organizations that wish to update their current entries have until Aug. 29 to fill out the form found in the Full Story link below.