The Colorado Privacy Act (SB 190, “CPA”) is the third major state privacy law passed in the United States. The CPA provides Colorado residents with numerous rights while simultaneously placing numerous obligations on businesses. Even if your business is located…
Data Privacy
On May 6, 2021, Tennessee Governor Bill Lee has signed the Insurance Data Security Law after its passage in the General Assembly. This new data security law creates obligations for insurance carriers in Tennessee, and was based on model legislation…
According to a recent SEC 10-Q filing, Amazon has received the largest fine in GDPR history, 887 million dollars. Amazon’s GDPR fine is more than ten times the second largest fine in GDPR history, which was a 61 million dollar…
On June 8, 2021, the Colorado legislature passed the Colorado Privacy Act (SB 190, “CPA”). The CPA is the latest major state privacy law passed in the United States, following close on the heals of the headline grabbing California Consumer…
In March 2021, the “Tennessee Information Protection Act” was proposed in the Tennessee State House of Representatives as an amendment to an existing bill dealing with campaign finance disclosures. The 27 page proposed amendment incorporated many similar provisions as those…
In February 2021, state legislators introduced an amendment to Tennessee’s data breach law to extend the notice from 45 to 60 days. Tennessee’s data breach law is contained within the Tennessee’ Identity Theft Deterrence Act (T.C.A. § 47-18-2107). You can…
The city of Knoxville, Tennessee recently fell victim to a ransomware attack which took many of the city’s government websites and computer servers offline, rendering many public services inaccessible for nearly a week. Forensic analysis revealed that the city was…
On June 1, 2020, following months of negotiations, modifications, rule making events, public hearings, and public comments, the California Office of the Attorney General has submitted the text of the CCPA final regulations to the California Office of Administrative Law…
Recently, four U.S. Senators introduced the COVID-19 Consumer Data Protection Act to provide “transparency, choice, and control” over the collection and use of American’s data. Without a nationwide federal privacy law, companies have been left to speculate how to handle…
The Small Business Administration (SBA) Economic Injury Disaster Loan (EIDL) program suffered a data breach of nearly 8,000 small-business owners, disclosing many owner’s social security numbers. The federal government acted to provide relief to small businesses under the CARES Act…