Privacy and Information Security Law Blog Update

March 2024

This Client Alert is a monthly update on privacy and cybersecurity developments as posted on our Privacy & Information Security Law Blog. If you would like to receive email alerts when new posts are published, please visit our blog and enter your email address in the subscribe field.

Recent posts on the Privacy & Information Security Law blog include:

• U.S. Cybersecurity and Infrastructure Agency Releases Proposed Rules on Breach Reporting Requirements
• CNIL Publishes Latest Edition of Its Practice Guide for the Security of Personal Data
• OFAC Settlement Illustrates Sanctions Compliance Risks for Foreign Asset Managers Trading U.S. Securities
• New Era of Regulation for Cross-Border Transfer in China
• Utah Enacts Amendments to State Breach Notification Law
• Virginia Legislature Passes Children’s Privacy Bill
• House Passes the Protecting Americans’ Data from Foreign Adversaries Act
• FTC Proposes $26 Million Penalty for Deceptive Marketing
• CIPL Files Response to FTC’s Notice of Proposed Rulemaking on the COPPA Rule
• FCC Launches Cybersecurity IoT Labeling Program
• Utah Governor Signs Spate of Privacy Bills into Law
• UK ICO Publishes New Guidance on Fines
• CPPA Board Holds Meeting on Revised Draft Regulations for Risk Assessment and Automated Decisionmaking Technology
• FCC Updated Data Breach Notification Rules Go into Effect Despite Challenges
• CJEU Rules That Oral Disclosure May Be Considered as Processing of Personal Data Under the GDPR
• New Hampshire Becomes 15^th State to Enact a Comprehensive State Privacy Law
• European Parliament Approves the AI Act
• FTC Hosts Annual PrivacyCon Event on March 6, 2024
• FTC Chair Asserts Certain Sensitive Data Should Be Excluded from Training AI Models
• CJEU Rules on IAB Europe’s Transparency and Consent Framework
• DOJ Regulations and White House Executive Order Will Target Protections for Americans’ Sensitive Personal Data Against Foreign Threat Actors
• College Board Agrees to Settle with the New York Attorney General Over Student Data Privacy
• NIST Releases Cybersecurity Framework 2.0