Canadian Underwriter reports: Before the House of Commons was dissolved last summer to kick off the federal election, the ruling Conservatives passed the Digital Privacy Act, which creates new offences for failing to report data security breaches. However, nation-wide mandatory breach notification would not actually take effect unless the government develops regulations, and it is not…
Category: Breach Laws
OR: Companies and state agencies must notify state of breaches affecting more than 250 Oregonians
KTVZ reminds everyone that Oregon’s new law has gone into effect whereby businesses and state agencies must notify the Oregon Attorney General of breaches affecting the personal information of at least 250 Oregonians. The new law defines protected data to include any medical, health insurance or biometric information as well as Social Security numbers, government ID numbers or…
Dutch Law Includes General Data Breach Notification Obligation and Larger Fines for Violations of the Data Protection Act
Hunton & Williams write: On January 1, 2016, a Dutch law became effective that (1) includes a general obligation for data controllers to notify the Data Protection Authority (“DPA”) of data security breaches, and (2) authorizes the DPA to impose direct fines for violations of the Data Protection Act. Read more on Hunton & Williams Privacy & Information…
Netherlands: data breach notification duties in effect January 2016
Wouter Seinen of Baker & McKenzie writes: Effective 2016, Netherlands’ businesses must notify the Dutch data protection authority (“DPA”) and sometimes individuals if they suffer certain data breaches that involve personal data under their control. Companies will have to take this seriously, as failure to notify may lead to fines up to €500,000 (or potentially…
A Closer Look at CISA’s Cybersecurity Information-Sharing Provisions
David Fagan, Ashden Fein and David Bender write: As we reported on October 27, the U.S. Senate passed the Cybersecurity Information Sharing Act (“CISA,” S. 754). If enacted into law, CISA would, among other things, establish a voluntary framework for the sharing of cybersecurity threat information between and among the federal government and private entities. CISA must…
2015 Data Breach Legislation Six Month Review: Many Proposals, Few Changes
Bryan Thompson and Sean B. Hoar of Davis Wright Tremaine LLP provide a status on action – and much inaction on bills at the federal and state level: Congress has moved at a glacial pace in considering data security legislation this year, even as the fallout over major data breaches, including the OPM breach, turned…