Topic: General
Subscribe to General RSS feed
Singapore Updates Its Model Artificial Intelligence Governance Framework
Posted in General
On 21 January 2020 at a meeting at the World Economic Forum, the Personal Data Protection Commission (PDPC) and Infocommunications Media Development Authority (IMDA) released the second edition of its Model Artificial Intelligence (“AI”) Governance Framework (“Model Framework”).… Continue reading
Data Privacy Day 2020 – Canadian Privacy Law Developments on the Horizon
Posted in Cybersecurity, Data breach, General
Happy Data Privacy Day! Data Privacy Day represents a timely opportunity to highlight anticipated significant developments in Canadian privacy law in 2020 that we are monitoring following two major developments from the Government of Canada.… Continue reading
Reflecting on APAC Data Protection and Cyber-security Highlights for 2019 (and what lies ahead!)
Posted in General2019 saw continued growth and change in data protection and cyber-security across the Asia-Pacific. Following the implementation of the GDPR in May, 2018, many jurisdictions moved to review and strengthen existing data privacy and cyber-security laws. In addition, 2019 saw regulators publishing findings in respect of some of the largest data incidents of 2018. We … Continue reading
Schrems II: AG deems SCCs valid but comes up with difficult new obligations and expresses “doubts” over privacy shield
Covert monitoring in the workplace – impact on an employee’s privacy
Posted in Dispute resolution and litigation, General
The Grand Chamber of the ECHR held that Spanish shop workers’ right to privacy under Article 8(1) of the ECHR was not violated when their employer obtained evidence of theft from covert CCTV footage of the employees.… Continue reading
First Data Access Agreement under the CLOUD Act signed by UK and US
Posted in GeneralNew York’s Breach Law Amendments and New Security Requirements
Office of Privacy Commissioner Says It’s Status Quo on Consent Requirements for Data Processing Transfers
Data protection and cyber risk issues in arbitration – dealing with regulation, cyber attacks and hacked evidence
US CLOUD Act and International Privacy
The U.S. Clarifying Lawful Overseas Use of Data Act (“CLOUD Act”) is apparently the Goldilocks of the privacy world, according to recent statements issued by two international jurisdictions. The CLOUD Act’s requirements are “too hard” for Australian law, according to the Law Council of Australia, but the privacy protections are “too soft” for the European … Continue reading
Cyber law firm of the year nomination
Posted in General
We are pleased to report that Norton Rose Fulbright has been shortlisted for cyber law firm of the year at the 2019 Insurance Insider Cyber Rankings Awards.… Continue reading
German antitrust authority prohibits Facebook from combining users’ personal data
Posted in GeneralOn 7 February 2019, the German antitrust authority (Bundeskartellamt, the FCO) ruled against Facebook combining user personal data from different sources, saying it was exploiting its position as a dominant social media company in violation of the EU data protection laws. The FCO said that Facebook abused its market dominance in: collecting, merging and using … Continue reading
Transition period under New York Cybersecurity Regulation ends March 1, 2019
The two-year transitional period under the New York State Department of Financial Services (“DFS”) Cybersecurity Regulation, 23 NYCRR 500 (the “Regulation”), will expire on March 1, 2019, with the final remaining requirement becoming effective. Entities covered by the Regulation that utilize third party service providers, which include not only banks and insurers, but also other … Continue reading
Pennsylvania Supreme Court holds common law duty for employers extends to protecting sensitive employee information
On November 21, 2018, the Pennsylvania Supreme Court broke new ground by holding that employers have a legal duty to take reasonable care to safeguard its employees’ sensitive personal information from cyberattacks. … Continue reading
Browsewrap agreements: Are you covered?
Posted in Dispute resolution and litigation, General
In a recent decision, a California federal court held that an arbitration provision contained in Viacom, Inc.’s browsewrap agreement was unenforceable and denied Viacom’s request to stay the case pending arbitration.[1] The court’s decision in Rushing v. Viacom, Inc. is consistent with “courts’ traditional reluctance to enforce browsewrap agreements against individual consumers.”[2]… Continue reading
Singapore’s new Cybersecurity Act comes into force: Here’s what you need to know
Posted in GeneralNorton Rose Fulbright – cyber law firm of the year nomination
Posted in GeneralWe are grateful to our clients and industry contacts for nominating us as cyber law firm of the year at the 2018 Insurance Insider Cyber Rankings Awards. The winner will be determined from the results of a wide-ranging survey of insurers and brokers and will be announced on September 21, 2018.… Continue reading
Uber as a HIPAA business associate
Posted in GeneralUber recently announced the launch of Uber Health, a non-emergency ride service that allows healthcare providers to schedule and pay for transportation for their patients. The stated purpose of the service is to expand medical transportation to traditionally underserved areas. Roughly 3.6 million Americans miss medical appointments each year due to lack of reliable transportation, contributing to the … Continue reading
Singapore passes new Cybersecurity Bill: Here’s what you need to know before it comes into force
Posted in Cybercrime, Data breach, GeneralNew York Event: Shark Tank – Cybersecurity in the Boardroom
How to pitch, explain, defend and collaborate on cybersecurity The board demands answers on cybersecurity. We discuss how executives can effectively respond to and collaborate with the board. Boards have now recognized that their companies, and board members themselves, face operational, financial, legal, and reputational consequences if they fail to address cybersecurity risk. Now, boards … Continue reading
Houston Event: Cybersecurity, Enterprise Risk and the Boardroom
What could a hacking event mean for directors and officers? Significant cybersecurity incidents are intensifying and evolving. What are director and officer (D&O) duties to prevent, prepare for and respond to data breaches? Directors and officers are facing a sophisticated, organized, and motivated adversary in cyber attackers, who are untethered by law, ethics, or fear … Continue reading
White House Issues Cybersecurity Order
On May 11th, 2017, the White House released an executive order on strengthening the cybersecurity of federal networks and critical infrastructure (the “Order”). The Order marks the administration’s first successful effort to address cybersecurity, after an earlier draft executive order on cybersecurity was postponed in January. The Order is divided into three substantive sections covering … Continue reading
Norton Rose Fulbright Nominated for Cyber Law Firm of the Year
The 2017 Advisen Cyber Risk Awards nominees have been announced, and Norton Rose Fulbright is shortlisted for Cyber Law Firm of the Year. Ballots are now open, and you can show your support for Norton Rose Fulbright by casting your vote before Friday, May 19 at 11:59 pm ET. Each year, Advisen recognizes the most … Continue reading
