Phil Yannella, Ballard Spahr litigation partner and Practice Leader of Ballard’s Privacy & Data Security Group, recently authored a treatise on data breach and privacy litigation.  The book, Cyber Litigation: Data Brach, Data Privacy & Digital Rights, is published by Thomson Reuters and is available now for purchase.  The publication of CyberLitigation comes at an important moment as the U.S.… Continue Reading

On December 18, 2020, the Office of the Comptroller of the Current (OCC), Federal Reserve Board (FRB), and Federal Deposit Insurance Corporation (FDIC) announced an interagency notice of proposed rulemaking that would require supervised banking organizations to provide notification of significant computer security incidents to their primary federal regulator.  Under the proposed rule, for incidents that could result in a banking organization’s inability to deliver services to a material portion of its customer base, jeopardize the viability of key operations of a banking organization, or impact the stability of the financial sector, the banking organization must notify its primary federal regulator no later than 36 hours after determining an incident has occurred. … Continue Reading

The California Attorney General’s Office recently released a fourth set of proposed regulatory modifications to the California Consumer Privacy Act (the “CCPA”).

As background, the Attorney General’s Office had only just recently given notice of a third set of modifications on October 12, 2020.  The third set of modifications revised the regulations relating to the notice of a consumer’s right to opt-out of the sale of their personal information. … Continue Reading

For our financial services clients interested in monitoring important federal and state legal developments, Ballard Spahr has launched a comprehensive, national tracking service designed to serve the needs of specific segments of the consumer financial services industry.

Beginning January 2, 2021, Ballard is pleased to offer three new federal and state trackers, which are available as a package or individually, depending on your financial institution’s needs:

  • Collections Tracker – providing expanded coverage of relevant federal and state legislative and regulatory developments impacting consumer collection activities; this will still include our current COVID-19-related coverage, but the tracker will be expanded to include new and evolving federal and state collection legislative and regulatory initiatives.
Continue Reading

On November 4, 2020, California voters approved of the ballot initiative Proposition 24, more commonly known as the California Privacy Rights Act (the “CPRA”).  The CPRA goes into effect on January 1, 2023, and will expand several of the existing protections in the California Consumer Privacy Act (the “CCPA”).

As background, the original CCPA emerged in 2018 as a compromise between legislators and the advocacy group, Californians for Consumer Privacy, which had secured a ballot measure vote for its proposed privacy law. … Continue Reading

On August 14, 2020, the California Office of Administrative Law (“OAL”) approved in part and withdrew in part the Regulations regarding the California Consumer Privacy Act (“CCPA”).  While most of the changes are non-substantive, the OAL withdrew certain provisions of the Regulations and resubmitted them to the Attorney General’s Office for further review. … Continue Reading

In this podcast, we discuss the latest modifications to the proposed CCPA regulations with Lauren Valenzuela, Corporate Counsel for Performant Financial, a provider of technology-based solutions to assist debt recovery.  Our discussion covers topics relevant to the debt industry, including the potential impact for debt collectors and other service providers indirectly collecting consumer data; changes for processing household requests; availability of GLBA and other exemptions; issues for users of artificial intelligence; relationship of CCPA opt-outs and FDCPA cease and desist requests; areas needing more clarification.… Continue Reading

On February 25th, the Federal Trade Commission (FTC) released its annual Privacy and Data Security Update, which highlights the FTC’s activities during the past year.

According to the update, the FTC enforcement actions in the past year involved privacy and data security addressing a range of issues, including identity theft, credit reporting and financial privacy, the EU-U.S.… Continue Reading

On February 7, 2020, the California Attorney General’s (AG) Office released modifications to the proposed regulations to the California Consumer Privacy Act (CCPA).  The modifications incorporate amendments to the CCPA signed into law after the AG’s Office issued the proposed regulations in October 2019.  The modifications also reflect public comments made during the initial comment period, which concluded in December 2019. … Continue Reading

In this podcast, we discuss the key aspects of the recently-proposed regulations to implement the CCPA, identify issues clarified by the proposal or left unresolved, compliance challenges raised by CCPA requirements for financial incentives and consumer requests received by large businesses, next steps (including the likely timeline for final regulations and enforcement), and activity in other states to adopt similar privacy laws.… Continue Reading