After a "summer hiatus," we have relaunched the Privacy and Security MATTERS Blog on a new platform. Note our new blog address an...

The Patient Privacy Rights Foundation welcomed last week’s announcement by the Department of Health and Human Services (HHS) that it was wit...

On June 24, 2010, the European Union's body that addresses data protection issues, the so-called Article 29 Working Party, adopted Opini...

Interesting press release from the Department of Health and Human Services (HHS) relating to the HITECH Breach Notification Final Rule. Th...

Written by Dianne Bourque Rite Aid has agreed to pay $1 million to settle allegations that it violated HIPAA by disposing of labeled pill b...

As promised last week in an earlier post , here is our first Mintz Levin client advisory analyzing the 234 pages of regulations issued on T...

Written by Jillian Collins Australian Privacy Commissioner Karen Curtis has concluded her investigation into Google's collection of uns...

Written by Kevin McGinty It’s a distressingly common scenario. A corporate laptop containing job applicant data, including social security n...

Just a reminder of the FREE upcoming data security compliance workshop - Space is limited, so register today at http://tinyurl.com/35pk3yr !...

Written by Dianne Bourque Connecticut Attorney General Richard Blumenthal has settled the first state-initiated HIPAA enforcement action. Th...

The long-awaited proposed changes to the HIPAA Privacy Rules have finally been released by the Department of Health and Human Services (HHS)...

Information regarding the latest reports of data breaches -- common thread: it is taking a startingly long time for entities to (a) discover...

Written by Kenneth Gantz At the urging of congressional lawmakers, the Federal Trade Commission has for the fifth time delayed enforcement o...

Written by Kenneth Gantz Anthem Blue Cross is notifying approximately 230,000 members and applicants for individual health insurance of a br...

On July 13, Mintz Levin will be joined by Sophos, Six Weight Consulting, and MFA Cornerstone Consulting to hold a free compliance workshop...

Twitter has reached a settlement with the Federal Trade Commission (FTC) over charges that it “deceived consumers and put their privacy at r...

Written by Jillian Collins The Federal Trade Commission has weighed in as part of the Department of Commerce's public comment process on...

Written by Jillian Collins Connecticut Attorney General Richard Blumenthal says he will lead a multistate investigation into Google Street V...

And as promised in our last post, here is the latest Client Advisory on the Supreme Court's ruling in the Quon case.

Written by Martha Zackin As we’ve blogged in this space,, back in December, the Supreme Court agreed to hear City of Onatario v. Quon , a c...

Today, Congressmen Joe Barton (R-TX), Edward Markey (D-MA), and Henry Waxman (D-CA)wrote to Google Chairman and CEO Eric Schmidt seeking an...

It’s been a while since we have visited the Federal Trade Commission’s Red Flags Rule here in this blog. The oft-postponed deadline is no...

As a follow-on to yesterday's posts regarding the public face of the Facebook privacy brouhaha, at this hour Facebook is holding an “all...

Whether the terse discussions in the public arena over Facebook’s privacy “changes” demonstrate that the world’s largest social network is p...

Ann Cavoukian, Ontario’s information and privacy commissioner, has issued her 2009 Annual Report , entitled “Access & Privacy, A Time fo...

Symposium on Privacy and Innovation Tomorrow , the Commerce Department is hosting a day-long symposium called “A Dialogue on Privacy and Inn...

This is "Choose Privacy Week" – an initiative by the American Library Association to raise awareness about sharing information on...

Off the privacy topic, but certainly an issue of national security. Mintz Levin client, InnoCentive, is crowdsourcing a solution to respon...

On this last day of April, there are a couple of breaches and another clarion warning about copy machines -- We have blogged on this issue h...

Written by Jennifer Rubin A Connecticut woman has filed a charge of discrimination under the Federal Genetic Information Nondiscrimination A...

Buried in a part of today's Federal Register was the publication of the Department of Health and Human Services' regulatory agenda....

Brokerage firm DA Davidson has agreed to pay a fine of $375,000 for failing to protect confidential client data from Latvian hackers who br...

Last year, the eight federal regulators that regulate the financial services industry issued a "simplified" model privacy notice t...

Our Friday afternoon feature -- Virginia Adds Medical Information Breach Law - The Commonwealth of Virginia has amended its data breach not...

It appears that Governor Haley Barbour has signed legislation sent to his desk by the Legislature on April 1, making Mississippi the 46th st...

The decision we blogged about in this space last week is creating quite a bit of buzz in both privacy and employment law circles. My employ...

In a precedent-setting decision, the New Jersey Supreme Court today ruled that a company should not have read e-mails a former employee sent...

Interesting post in today’s Wired: Threat Level blog about a motion in the Alberto Gonzalez hacking case that was unsealed on Monday. We n...

As we blogged here last week, we were going to post our Client Alert with further details about the settlement and consent order reached by...

The French Senate has overwhelmingly approved a major draft bill updating the country's 1978 data protection act to, among other things,...

Some news items for the last Friday in March - Another state has joined the Payment Card Industry Data Security Standard (" PCI ")...

As we have discussed before , HHS’s Office of Civil Rights has let it be known that a proposed rule implementing the HITECH Act’s privacy an...

Yesterday, the Federal Trade Commission (“FTC”) weighed in with another proposed settlement agreement requiring that the Dave & Buster...

A computer hacker has been sentenced to 20 years in prison for helping engineer one of the largest thefts of credit and debit card numbers i...

We will post a link to the amended legislation as soon as it is released by the Committee. The Senate Commerce Committee press release -- WA...

A new study has Boston ranked No. 2 among U.S. cities as a "hotspot" of cybercrime. In a study published yesterday by California d...

No, we're not "taking names" here. This is just a 10-question survey to gauge some basic compliance metrics. Please partic...

Senators Gillibrand and Hatch this afternoon introduced their cybersecurity bill, the International Cybercrime Reporting and Cooperation Ac...

In case your data security compliance plan is stuck in neutral, you have questions, or you haven't started yet...there will be a free (!...

We have blogged about the on-again, off-again, then on-again (but revised) Maine "Act to Prevent Predatory Marketing Practices Against ...

Our Friday afternoon feature is back (albeit on Thursday due to schedule tomorrow) – a quick round-up of bits and bytes related to data pri...

By Susan Foster, Mintz Levin London As of April 6, 2010, the UK’s Information Commissioner’s Office (ICO) can levy fines of up to £500,000 f...

Rumors are flying that Facebook will unveil a new geolocation sharing device next month. According to a post in Bits Blog in the New York ...

“[E]nough holes that you could drive a truck through it…..” That’s how Federal Trade Commission Chairman Jon Leibowitz described the identit...

For all of you who have been struggling with data security compliance obligations from various fronts, and trying to handle complex technica...

Wyndham Hotels and Resorts has apparently notified the U.S. Secret Service and several state attorneys that hackers stole customer names and...

After implementation delays and rule changes, new data protection regulations that are widely considered the most stringent in the nation ta...

At the beginning of the "countdown" to the March 1st effective date of 201 CMR 17.00, we offered some posts with "misapprehen...

And that means today is the last business day before the new Massachusetts data security regulations go live-- as Jim Cramer would say, ...

The reactions are coming in fast and furious to yesterday’s conviction of three Google executives in an Italian court. Linked here are just...

In the first case of its kind, an Italian judge today convicted three Google executives on privacy violations in Milan court. Global Privacy...

February and March are just full of significant deadlines for privacy/security reporting and compliance. Today is the day that the Health ...