Phil Yannella, Ballard Spahr litigation partner and Practice Leader of Ballard’s Privacy & Data Security Group, recently authored a treatise on data breach and privacy litigation. The book, Cyber Litigation: Data Brach, Data Privacy & Digital Rights, is published by Thomson Reuters and is available now for purchase. The publication of CyberLitigation comes at an important moment as the U.S.… Continue Reading
Privacy
Federal agencies consider requiring reporting of computer security incidents
On December 18, 2020, the Office of the Comptroller of the Current (OCC), Federal Reserve Board (FRB), and Federal Deposit Insurance Corporation (FDIC) announced an interagency notice of proposed rulemaking that would require supervised banking organizations to provide notification of significant computer security incidents to their primary federal regulator. Under the proposed rule, for incidents that could result in a banking organization’s inability to deliver services to a material portion of its customer base, jeopardize the viability of key operations of a banking organization, or impact the stability of the financial sector, the banking organization must notify its primary federal regulator no later than 36 hours after determining an incident has occurred. … Continue Reading
California Attorney General Shows No Sign of Slowing CCPA Rulemaking with Fourth Set of Proposed Modifications
The California Attorney General’s Office recently released a fourth set of proposed regulatory modifications to the California Consumer Privacy Act (the “CCPA”).
As background, the Attorney General’s Office had only just recently given notice of a third set of modifications on October 12, 2020. The third set of modifications revised the regulations relating to the notice of a consumer’s right to opt-out of the sale of their personal information. … Continue Reading
Ballard Spahr launches national tracking services for financial institutions
For our financial services clients interested in monitoring important federal and state legal developments, Ballard Spahr has launched a comprehensive, national tracking service designed to serve the needs of specific segments of the consumer financial services industry.
Beginning January 2, 2021, Ballard is pleased to offer three new federal and state trackers, which are available as a package or individually, depending on your financial institution’s needs:
- Collections Tracker – providing expanded coverage of relevant federal and state legislative and regulatory developments impacting consumer collection activities; this will still include our current COVID-19-related coverage, but the tracker will be expanded to include new and evolving federal and state collection legislative and regulatory initiatives.
California voters approve CPRA
On November 4, 2020, California voters approved of the ballot initiative Proposition 24, more commonly known as the California Privacy Rights Act (the “CPRA”). The CPRA goes into effect on January 1, 2023, and will expand several of the existing protections in the California Consumer Privacy Act (the “CCPA”).
As background, the original CCPA emerged in 2018 as a compromise between legislators and the advocacy group, Californians for Consumer Privacy, which had secured a ballot measure vote for its proposed privacy law. … Continue Reading
CCPA Regulations Go Into Effect – With a Few Final Changes
On August 14, 2020, the California Office of Administrative Law (“OAL”) approved in part and withdrew in part the Regulations regarding the California Consumer Privacy Act (“CCPA”). While most of the changes are non-substantive, the OAL withdrew certain provisions of the Regulations and resubmitted them to the Attorney General’s Office for further review. … Continue Reading
This week’s podcast: A look at how the latest modifications to the proposed CA Consumer Privacy Act regulations impact the debt industry
In this podcast, we discuss the latest modifications to the proposed CCPA regulations with Lauren Valenzuela, Corporate Counsel for Performant Financial, a provider of technology-based solutions to assist debt recovery. Our discussion covers topics relevant to the debt industry, including the potential impact for debt collectors and other service providers indirectly collecting consumer data; changes for processing household requests; availability of GLBA and other exemptions; issues for users of artificial intelligence; relationship of CCPA opt-outs and FDCPA cease and desist requests; areas needing more clarification.… Continue Reading
FTC Releases 2019 Privacy and Data Security Update
On February 25th, the Federal Trade Commission (FTC) released its annual Privacy and Data Security Update, which highlights the FTC’s activities during the past year.
According to the update, the FTC enforcement actions in the past year involved privacy and data security addressing a range of issues, including identity theft, credit reporting and financial privacy, the EU-U.S.… Continue Reading
California AG issues modifications to proposed CCPA Regulations
On February 7, 2020, the California Attorney General’s (AG) Office released modifications to the proposed regulations to the California Consumer Privacy Act (CCPA). The modifications incorporate amendments to the CCPA signed into law after the AG’s Office issued the proposed regulations in October 2019. The modifications also reflect public comments made during the initial comment period, which concluded in December 2019. … Continue Reading
This week’s podcast: A look at the California Consumer Privacy Act proposed regulations
In this podcast, we discuss the key aspects of the recently-proposed regulations to implement the CCPA, identify issues clarified by the proposal or left unresolved, compliance challenges raised by CCPA requirements for financial incentives and consumer requests received by large businesses, next steps (including the likely timeline for final regulations and enforcement), and activity in other states to adopt similar privacy laws.… Continue Reading