Privacy Law Matters Blog

By Deb Gray Our friends at KL&M Law, in Warsaw Poland, were kind enough to share unpublished decisions from the data protection authority (DPA) of Poland (UODO) that they obtained as part of a recent information request. The unpublished decisions involve controllers who received reprimands from the DPA related to non-compliance with the General Data…

By Sheila Sokolowski, Kate Black, and Mason Fitch On February 1st, 2023, the Federal Trade Commission (FTC) issued a proposed order against GoodRx Holdings, Inc. (GoodRx), a digital health platform, for allegedly violating Section 5 of the FTC Act by making deceptive statements about its sharing of health data. In addition, in its first enforcement…

By Cameron CantrellHere’s a snapshot of the privacy, security, and data developments tracked by our team over the past few weeks. If you missed our last post, you can find it here. US STATE LAW New York Department of Financial Services (NYDFS) Proposed Amendments to State Cybersecurity RegulationThe NYDFS proposed a significant update to their…

By Sam Castic The Hintze Cybersecurity + Breach Response Group has published a new guide to U.S. state and territory data breach notification laws – the Hintze Data Breach Notice Guide accessible here.  We include in our guide an overview section with a high-level summary of the common provisions that U.S. breach notice laws contain. …

By Mason Fitch The U.S. Department of Health & Human Services Office for Civil Rights (OCR) issued a new bulletin last week that may have significant implications for online activities of Covered Entities and Business Associates. The bulletin, “Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates,” explains how HIPAA’s reach extends…

By Charlotte LundayOn November 10, 2022, a plaintiff filed a class action lawsuit against Apple, Inc., citing a recent Gizmodo article reporting that security researchers had found that Apple apps, such as the App Store, collected device and usage data from iPhones regardless of the privacy settings users enabled. The complaint alleges that Apple collects…

By Taylor WidawskiOn November 11, 2022, Google entered into a $391.5 million settlement with 40 state attorneys general—the largest ever attorney-general led consumer privacy settlement.The investigation, led by attorneys general in Oregon and Nevada, began after a 2018 Associated Press article reported that Google tracks consumers’ location, even when the settings, including on Google’s Android…

By Sheila Sokolowski and Charlotte Lunday  Following up on its warning that it would be cracking down on Education Technology companies, the Federal Trade Commission (FTC) issued a proposed order against Chegg Inc., an online tutoring and homework aid service for high school college students, for lax security practices. According to its complaint, the FTC…

By Leslie VelozHere’s a snapshot of a few privacy developments from the past few weeks. If you missed our last post, you can find it here. US STATE LAWAmazon and Microsoft Granted Summary Judgement in Biometric Data Privacy Lawsuits A Washington federal judge dismissed two putative class actions by Chicago residents, accusing Microsoft and Amazon of violating…

By Charlotte Lunday The Federal Trade Commission hosted an event October 19, 2022, discussing digital advertising to kids. The event primarily focused on “blurred” or “stealth” advertising. Blurred advertising refers to ads that are difficult to distinguish from substantive content. One example of this type of advertising would be an ad that appears to be…