Privacy and Information Security Law Blog Update

This Client Alert is a monthly update on privacy and cybersecurity developments as posted on our Privacy & Information Security Law Blog. If you would like to receive email alerts when new posts are published, please visit our blog and enter your email address in the subscribe field.

Recent posts on the Privacy & Information Security Law blog include:

• OCR Continues to Settle HIPAA Right of Access Initiative Cases
• European Union and South Korea Complete Adequacy Talks
• China Issues the Measures for the Supervision and Administration of Online Transactions
• CIPL Submits Comments on Irish DPC’s Guidance on Safeguarding Personal Data of Children
• Bavarian DPA Declares Transfers to E-mail Marketing Service Prohibited Due to Lack of Controller’s Assessment and Supplementary Measures
• China Issues Provisions on the “Scope of Necessary Personal Information Required for Common Types of Mobile Internet Applications”
• Webinar on Virginia’s Consumer Data Protection Act
• CIPL Publishes Recommendations on a Risk-Based Approach to Regulating AI
• UK Government and ICO Agree on Procedure for Future Adequacy Decisions
• Board Members Appointed to California Privacy Protection Agency
• California Attorney General Approves Additional CCPA Regulations
• French Highest Court Rejects Suspension of Partnership with EU Service Provider Using AWS; Extends Application of the Schrems II Requirements
• EDPB Releases Guidelines on Virtual Voice Assistants
• NYDFS Settles with Mortgage Company for Data Breach
• CIPL Submits Response to the EDPB Guidelines on Examples Regarding Data Breach Notification
• CIPL Submits Response to New Brazilian Data Protection Authority’s First Public Consultation on SMEs
• Virginia Becomes the Second U.S. State to Enact Major Privacy Legislation
• FTC to Host Digital Dark Patterns Workshop in April