NIST Issues Draft Update to the Cybersecurity Framework

On January 10, 2017, as the Obama administration draws to a close, the National Institute of Standards and Technology (“NIST”) released a long-awaited draft version 1.1 of its ground-breaking Framework for Improving Critical Infrastructure Cybersecurity.  This draft revision builds upon … Continue reading

Posted in Cyber Security, FTC, Government Regulations, NIST

Share this Article:

FTC sues IoT Device Manufacturer D-Link for Lax Cyber Security Practices

On January 5, 2017, the Federal Trade Commission (“FTC”) filed a complaint against computer networking hardware manufacturer D-Link Corporation, alleging that the company’s wireless routers, IP cameras, and other “Internet of Things” (IoT) products failed to implement basic security features, thus … Continue reading

Posted in Cyber Security, Data Protection, FTC, Internet of Things, IoT

Share this Article:

FTC Releases a Data Breach Response Guide For Business

Data breaches are fast becoming a fact of life.  Experiencing a data breach is never a pleasant experience, regardless of how it happens – by accident, by criminal intent, or by system failure.  Someone steals a company laptop that contains … Continue reading

Posted in Data Breach, FTC

Share this Article:

Cybersecurity Requirements Proposed for New York Financial Companies

The New York Department of Financial Services has proposed new cybersecurity regulations “designed to promote the protection of customer information as well as the information technology systems of regulated entities .” These are the first proposed state-enacted financial institution regulations … Continue reading

Posted in Cyber Security

Share this Article:

Commerce Secretary: Trust Gap Hinders Cyber Attack Reporting

In a keynote address delivered on September 27, 2016 at the U.S. Chamber of Commerce’s fifth annual Cybersecurity Summit in Washington, DC, Commerce Department Secretary Penny Pritzker conceded that “the federal government cannot regulate cyber risk out of existence.”  Additionally, while calling … Continue reading

Posted in Cyber Security, Government Regulations

Share this Article:

New Law Deals With Digital Assets After Death

In an article earlier this year we noted that several states had introduced legislation to address an emerging issue that is unique to our Information Age: how will our digital assets be accessed and used (or kept private and destroyed, … Continue reading

Posted in Data Protection, Privacy, State Privacy Laws

Share this Article:

Congress Releases Unclassified Summary on Snowden/NSA Leak

On September 15, 2016, the House of Representatives’ Intelligence Committee released its summary findings of a two-year investigation concerning the unauthorized disclosures made by former National Security Agency (NSA) contractor Edward Snowden. A copy of the unclassified executive summary can be … Continue reading

Posted in Cyber Security, Data Breach, NSA

Share this Article:

Privacy Tip: Cover Your Computer Camera and Microphone

Someone may be using your laptop or your desktop web camera to watch and listen to you without your knowledge. It happens, and yes, it’s downright creepy.  And to think that someone may be spying on your kids that way … Continue reading

Posted in Cyber Security, Electronic devices, FBI, Privacy

Share this Article:

Privacy and The Cell Phone: Arizona Says Yes

Arizona recently recognized a “legitimate expectation of privacy” in cell phones. The case was State v. Peoples, and the opinion was issued on September 12, 2016. The Peoples case was about the police’s search of a cell phone without a … Continue reading

Posted in Arizona, Digital evidence, Privacy

Share this Article:

FTC Round-Up: NIST Framework Compliance Is Not Enough and Looming Ransomware Enforcement Activity

On August 31st and September 7th, 2016, the Federal Trade Commission (FTC) provided guidance regarding cybersecurity standards, which companies should consider when assessing their current data security posture. NIST Framework Compliance Is Not Enough On August 31st, the FTC published … Continue reading

Posted in Cyber Security, FTC, Government Regulations, Ransomware

Share this Article: