Newsletters

01.16.19

State AGs Deal With Payment Processor, Mobile Apps

In state enforcement news, Massachusetts Attorney General Maura Healey announced a settlement with a California-based payment services provider, while New York Attorney General Barbara Underwood reached a deal with five companies related to security vulnerabilities in their mobile apps.


11.07.18

FSSCC Launches Cybersecurity Profile v1.0

A coalition of industry groups has unveiled a new cyber compliance profile framework specifically for financial institutions, aimed at streamlining regulatory burdens.


09.27.18

Ohio, Colorado Add to State Data Protection Laws

While the California Consumer Privacy Act (CCPA) and subsequent amendments have dominated privacy news lately, some states are enacting data protection legislation that could impact financial institutions and businesses.


09.27.18

Major Data Breach Settlement Between Uber and State AGs

In one of the largest privacy settlements to date, the attorneys general from 50 states and the District of Columbia secured a $148 million settlement from their investigation into a November 2016 hack of driver data from Uber.


08.29.18

Next Phase Begins for DFS Cybersecurity Regulations

A reminder from the New York Department of Financial Services (DFS): Beginning Sept. 4, all banks, insurance companies and other financial services institutions regulated by the DFS must begin complying with several additional requirements of the agency’s landmark cybersecurity regulation.


08.02.18

FTC Seeks Greater Data Security, Privacy Authority

The Federal Trade Commission (FTC) is seeking more power to protect consumers and promote competition. In testimony before Congress, the FTC chair and the associate director for the Division of Privacy and Identity Protection discussed the agency’s enforcement efforts and assured lawmakers ...


07.19.18

What California’s New Consumer Privacy Bill Means for Healthcare

California Governor Jerry Brown signed A.B. 375, the California Consumer Privacy Act of 2018 (CCPA), into law on June 28, 2018.


07.18.18

State Financial Regulators Settle With Equifax Over Data Breach

Pursuant to a consent order with eight state financial regulators, Equifax agreed to take corrective actions following its record-breaking 2017 data breach, but avoided paying any fines or penalties.  


07.10.18

California Governor Signs Sweeping New Privacy Legislation

Governor Brown and California legislators enacted far-reaching consumer privacy and data security protections in a deal to avoid a deeply flawed privacy initiative being placed on the ballot for voters in November.


07.05.18

Consumer Lenders Beware: New California Privacy Law Likely Applies

Consumer lenders doing business in California will be subject to the new consumer privacy requirements by 2020, under California’s version of the General Data Protection Regulation (GDPR).