IP & Technology Law Trends
All Articles
The EU’s General Data Protection Regulation (GDPR), Effective May 25, 2018, Will Impact Many United States Businesses
Who: United States businesses that process (i.e., collect, store, or transmit) the personal information of EU residents in connection with offering goods or services in the EU (online or otherwise) are subject to the GDPR, regardless of whether the b...
Continue Reading >
What’s in Your Privacy Policy? New Oregon Law Requires Accuracy
On May 25, 2017, Oregon Governor Kate Brown signed into law H.B. 2090. This new law will make materially inaccurate claims related to the collection, use, disclosure, maintenance, and disposal of consumer data an unlawful trade practice subject to en...
Continue Reading >
It’s Tax Fraud Season: Take Action Today to Avoid This Common Data Breach Scenario
Last year, many businesses suffered data breaches during tax season when their employees divulged other employees’ W-2 information (including Social Security numbers) to criminals. Sadly, we are starting to receive reports that the criminals are back...
Continue Reading >
Third Circuit Affirms FTC Enforcement Authority Over Cybersecurity Practices
Recently, the U.S. Court of Appeals for the Third Circuit ruled that the Federal Trade Commission (the “FTC”) may pursue a lawsuit against Wyndham Worldwide Corporation, a hotel and time-share operator, for “unfair and deceptive” cybersecurity practi...
Continue Reading >
Update: Neiman Marcus Asks for En Banc Review of Recent Seventh Circuit Data-Breach Ruling
We recently wrote a post on this blog analyzing the Seventh Circuit’s ruling that the victims of a Neiman Marcus data breach could proceed with their claims against the retailer. We noted the significance of the decision because it allowed...
Continue Reading >
Oregon Makes Significant Amendments to Its Data Breach Law, Including Expanding the Definition of “Personal Information”
On June 10, 2015, Oregon Governor Kate Brown signed into law a bill that significantly amends Oregon’s data breach notification law.
The amended law, which is effective January 1, 2016 (and applies to breaches occurring on and after that date), requi...
Continue Reading >