Cybersecurity & Privacy

  • June 21, 2024

    4 From Cybercrime Group Charged In $71M Hacking Scheme

    Four members of the international cybercrime group known as FIN9 have been charged for their roles in hacking companies' computer networks and stealing more than $71 million through nonpublic information, employee benefits and other funds, Philip R. Sellinger, an attorney for the District of New Jersey, has announced.

  • June 21, 2024

    Rip And Replace 'Ruinous' Without Fed Funds, Carriers Say

    A rural telecoms trade group is warning the Federal Communications Commission of potentially "ruinous" financial predicaments for small carriers if the "rip and replace" program targeting Chinese-made telecommunications equipment isn't fully funded soon, saying in a new filing that carriers are considering reducing service because of the lack of funding.

  • June 21, 2024

    Sens. Introduce 'Complementary' Bill To TikTok Ban

    A bipartisan bill introduced Thursday would require websites and apps to disclose to their users if they are owned wholly or partially by China, North Korea, Russia or Iran or if data collected through those sites or apps is accessible to those countries.

  • June 20, 2024

    TikTok Says Alternatives To 'Dangerous' Ban Were Ignored

    TikTok said Thursday that federal lawmakers likely didn't even consider its "exhaustive, multi-year efforts" to address national security concerns before deciding to ban the social media platform, slamming the law as "unprecedented" and warning that it sets "a dangerous precedent."

  • June 20, 2024

    SEC Official Seeks To Ease Concerns Over Cybersecurity Rule

    The director of the U.S. Securities and Exchange Commission's corporation finance division reassured public companies on Thursday that the agency's recently adopted rule requiring them to make certain disclosures regarding material cybersecurity incidents does not prohibit them from sharing additional details with third parties.

  • June 20, 2024

    Calif. AG, City Atty Target SpongeBob App Over Kids' Privacy

    California's attorney general and the Los Angeles city attorney have teamed up to secure a deal that requires the operator of a SpongeBob SquarePants-themed app to pay $500,000 and overhaul its data-handling practices to resolve claims that the company gathered and shared children's personal information without consent. 

  • June 20, 2024

    Web-Tracking Guidance Exceeded HHS' Authority, Judge Says

    A Texas federal judge ordered the Biden administration Thursday to rescind its new guidance restricting hospitals' use of online tracking technology, declaring that federal officials had overstepped their authority by redefining what they consider protected health information.

  • June 20, 2024

    FCC Slams Bid In 6th Circ. To Put Net Neutrality On Hold

    The Federal Communications Commission told the Sixth Circuit on Tuesday it should pay no heed to a collection of net neutrality challengers arguing that "dire consequences" will ensue if the appellate court doesn't stop the agency from reinstating open internet regulations while the two sides argue the matter out in court.

  • June 20, 2024

    Competition Raids Don't Need Warrant For Emails, ECJ Told

    European Union law doesn't bar member states from permitting competition authorities to search emails without a warrant amid a so-called dawn raid, according to an advisory opinion submitted to the bloc's top appeals court Thursday.

  • June 20, 2024

    Deals Rumor Mill: Carlyle-KKR, Didi IPO, Open AI

    The deals rumor mill is often overflowing with transactions that are reportedly close to being signed, so it can be hard to know which ones to stay on top of.

  • June 18, 2024

    Novant Pays $6.7M For Sharing Patient Data With Facebook

    A North Carolina federal judge on Monday gave the final seal of approval to a proposed $6.7 million deal resolving litigation alleging Novant Health Inc. shared sensitive patient data with Facebook, certifying a nationwide settlement class of roughly 1.3 million individuals.

  • June 18, 2024

    RR Donnelley Pays $2.1M To Settle SEC Claims Over Hack

    Marketing and communications giant R.R. Donnelley & Sons has reached a deal with the U.S. Securities & Exchange Commission to pay over $2.1 million to settle claims over a 2021 cybersecurity incident that stemmed from poor internal controls and disclosure failures, the agency announced Tuesday.

  • June 18, 2024

    No Reason To Move Net Neutrality Suits To DC Circ., ISPs Say

    Nearly a dozen industry groups are calling on the Sixth Circuit to reject an effort by the Federal Communications Commission to move a raft of lawsuits over the FCC's net neutrality rules to the D.C. Circuit.

  • June 18, 2024

    Texas Atty Pares Border Phone Search Suit To Just APA Claim

    A Texas attorney has significantly trimmed a lawsuit over cellphone searches at the border, dismissing claims he brought under the First and Fourth Amendments but leaving intact allegations the practice represents a violation of the federal Administrative Procedure Act.

  • June 18, 2024

    6th Circ. Asks Who's A 'Consumer' In Meta Data Sharing Case

    Sixth Circuit judges questioned how a decades-old federal privacy law aimed at protecting people's video rental history applies to website users, as one customer argued Tuesday that the court should revive claims that Paramount unlawfully shared his data with Meta, Facebook's parent company.

  • June 18, 2024

    AIG Unit Says Exclusions Bar Pet Supply Co.'s BIPA Claims

    An AIG unit has told a Michigan federal court a pet supply store isn't owed defense for an underlying class action brought by employees alleging the store violated the Illinois Biometric Information Privacy Act, maintaining that a "recording and distribution" exclusion and "employment-related practices exclusion" were triggered.

  • June 18, 2024

    Gov't Says New Guidelines Can't Cut Crypto Expert's Sentence

    Federal prosecutors have told a Manhattan federal judge that the crypto computing expert who received five years for aiding North Korea's blockchain development shouldn't get to cut a year off his sentence just because sentencing guidelines have been updated while he's served his term.

  • June 18, 2024

    Apple Sanctioned In Siri Privacy Suit For Deleting Recordings

    A California federal judge has sanctioned Apple Inc. in a privacy lawsuit brought by Siri users who claim the voice-activated software records their conversations, finding the tech giant spoiled evidence by deleting key data, but that a jury should determine whether Apple deprived the users of the data intentionally.

  • June 18, 2024

    Noncustomers Cinch Settlement In Citibank Robocall Suit

    Citibank has reached a deal with a class of noncustomers who accused the bank of bombarding them with unauthorized robocalls, according to a notice filed in Arizona federal court, ending six years of litigation alleging Citibank had violated the Telephone Consumer Protection Act.

  • June 18, 2024

    FTC Escalates Probe Into TikTok's Privacy Measures For Kids

    The Federal Trade Commission on Tuesday took the rare step of publicly disclosing its referral to the U.S. Department of Justice of a complaint against TikTok and its parent company over their compliance with a 2019 privacy settlement, saying there's "reason to believe" that the companies are out of step with their pledge to protect children on the platform.

  • June 18, 2024

    Chicago Cubs Will Pay $1.2 Million To End TCPA Suit

    An Illinois federal judge granted final approval Monday to a $1.2 million settlement that resolves litigation accusing the Chicago Cubs of sending persistent marketing text messages that violated the Telephone Consumer Protection Act.

  • June 18, 2024

    Ariz. County Says New Kari Lake Vote Claims Merit Sanctions

    Maricopa County officials are slamming former gubernatorial candidate Kari Lake's bid to unravel a Ninth Circuit decision affirming the toss of her lawsuit over Arizona's voting machines, contending that the "fatally flawed" effort warrants sanctions.

  • June 17, 2024

    Calif. Becomes Last State To Ink Deal Over Blackbaud Breach

    Blackbaud Inc. has agreed to pay $6.75 million to resolve data security claims brought by California's attorney general, who was the only one to sit out a nearly $50 million settlement that the software provider reached last year with every other state over a 2020 ransomware attack that affected thousands of its customers.

  • June 17, 2024

    Judge Cements Decision Clearing Cisco From $2.75B Ruling

    There will be not be a third trial for a cybersecurity startup that has seen its multibillion-dollar patent win turn into nothing at all, a Virginia federal judge has decided, after a second trial found that Cisco wasn't actually infringing its patents.

  • June 17, 2024

    BNSF's $75M BIPA Deal With Truckers Nears Final OK

    A $75 million biometric privacy settlement between BNSF Railway Co. and a class of truck drivers who challenged the railroad's gate-access practices neared final approval Monday, resolving litigation that had been pending in Illinois' state and federal courts.

Expert Analysis

  • Steps To Reduce CIPA Litigation Risks For Companies

    Author Photo

    As class action claims brought under the California Invasion of Privacy Act continue to advance new theories under an old law to target companies for commonplace website and app activities, there are steps that organizations can take to reduce exposure and strengthen their defenses against such lawsuits, say attorneys at Hintze Law.

  • Banks Should Continue To Prep For CFPB Data Rule Rollout

    Author Photo

    Consumer Financial Protection Bureau-supervised banks should not expect industry pressure to delay the rollout of proposed Section 1033 open banking rules, which regulate how consumer financial information flows between financial institutions, and prepare their required data access portals and compliance procedures now, say attorneys at Troutman Pepper.

  • Tips For Orgs Facing AI Data Privacy Compliance Challenges

    Author Photo

    Regulators around the world are actively seeking to enforce data privacy and consumer protection laws against companies providing artificial intelligence-related services, raising complex compliance questions in areas like transparency, data minimization, lawfulness of processing, data subject rights and higher risk activities, say attorneys at Hogan Lovells.

  • BIPA's Statutory Exemptions Post-Healthcare Ruling

    Author Photo

    The Illinois Supreme Court's November opinion in Mosby v. Ingalls Memorial Hospital, which held that the Biometric Information Privacy Act's healthcare exemption also applies when information is collected from healthcare workers, is a major win for healthcare defendants that resolves an important question of statutory interpretation, say attorneys at Quinn Emanuel.

  • Enforcement Risk Amid Increased Consumer Data Use

    Author Photo

    While no state has introduced a private right of action for noncompliance with a comprehensive consumer privacy law — except for the California Consumer Privacy Act's data breach provision — organizations and retailers face risk from enforcement actions by state attorneys general and privacy regulators, say attorneys at Dentons.

  • Litigation Inspiration: A Source Of Untapped Fulfillment

    Author Photo

    As increasing numbers of attorneys struggle with stress and mental health issues, business litigators can find protection against burnout by remembering their important role in society — because fulfillment in one’s work isn’t just reserved for public interest lawyers, say Bennett Rawicki and Peter Bigelow at Hilgers Graben.

  • Opinion

    The Problems In Calif. Draft Behavioral Ad Privacy Regs

    Author Photo

    The California Privacy Protection Agency has an opportunity with its automated decision-making technology and profiling rulemaking to harmonize California's regulation of data-driven advertising, but this will be a failure unless several things are changed in its proposed treatment of behavioral advertising, say Alan Friel and Kyle Fath at Squire Patton.

  • Series

    Skiing Makes Me A Better Lawyer

    Author Photo

    A lifetime of skiing has helped me develop important professional skills, and taught me that embracing challenges with a spirit of adventure can allow lawyers to push boundaries, expand their capabilities and ultimately excel in their careers, says Andrea Przybysz at Tucker Ellis.

  • How Breach Reporting Is Changing For Financial Institutions

    Author Photo

    In May, the Federal Trade Commission's amended Safeguards Rule will extend the data protections that apply to information held by banks to information held by nonbanking financial institutions — and sweep even more broadly in some critical aspects, say Evan Yahng and Kurt Hunt at Dinsmore.

  • High Court Social Media Speech Ruling Could Implicate AI

    Author Photo

    In Moody v. NetChoice and NetChoice v. Paxton, the U.S. Supreme Court is considering whether certain state laws can restrict content moderation by social media platforms, but the eventual decision could also provide insight into whether the first amendment protects artificial intelligence speech, say Joseph Meadows and Quyen Dang at GRSM50.

  • Assessing Chinese Cross-Border Data Transfers

    Author Photo

    Jet Deng and Ken Dai at Dacheng unpack the regulatory framework for cross-border data transfers in China, detailing the major systems at play, last year's policy adjustments, and an outlook and practice tips for businesses.

  • Think Like A Lawyer: Forget Everything You Know About IRAC

    Author Photo

    The mode of legal reasoning most students learn in law school, often called “Issue, Rule, Application, Conclusion,” or IRAC, erroneously frames analysis as a separate, discrete step, resulting in disorganized briefs and untold obfuscation — but the fix is pretty simple, says Luke Andrews at Poole Huffman.

  • The Corporate Transparency Act Isn't Dead Yet

    Author Photo

    After an Alabama federal court's ruling last week rendering the Corporate Transparency Act unconstitutional, changes to the law may ultimately be required, but ongoing compliance is still the best course of action for most, says George Singer at Holland & Hart.

  • The Pros And Cons Of Protecting AI As Trade Secrets

    Author Photo

    Despite regulatory trends toward greater transparency of artificial intelligence models, federal policy acknowledges, and perhaps endorses, trade secret protection for AI information, but there are still hurdles in keeping AI information a secret, say Jennifer Maisel and Andrew Stewart at Rothwell Figg.

  • Conn. Data Privacy Enforcement Takeaways For Cos.

    Author Photo

    In light of the Connecticut attorney general's recently released report on its enforcement of the Connecticut Data Privacy Act, which focuses on companies' privacy policies, protections of sensitive data and more, businesses can expect increased enforcement scrutiny — especially in areas that are the subject of consumer complaints, say Paul Pittman and Abdul Hafiz at White & Case.

Want to publish in Law360?


Submit an idea

Have a news tip?


Contact us here
Can't find the article you're looking for? Click here to search the Cybersecurity & Privacy archive.
Hello! I'm Law360's automated support bot.

How can I help you today?

For example, you can type:
  • I forgot my password
  • I took a free trial but didn't get a verification email
  • How do I sign up for a newsletter?
Ask a question!