Privacy and Data Security

RSS Feed Email Print
Share
View divider Overview divider Attorneys divider a-pvcblog.gif divider PDF Version
Practice Contacts
Liisa Thomas
T: +1 (312) 558-6149 | Email
Practice Areas
Advertising, Marketing & Privacy Law Practice
Advertising and Entertainment Disputes
Advertising & Promotions Counseling
Advertising & Promotions Transactions
Sweepstakes and Promotions
Privacy and Data Security
Technology Transactions, Licensing, and Outsourcing
Copyright Litigation
Trademark Litigation
Resource Center
Topics
advertising   BCR   behavioral tracking   blogging   breach notification   CAN-SPAM   CARU   children's privacy   cloud computing   collection of consumer information   communications privacy   consumer privacy   cookies   COPPA   data breach   data breach notification   data protection   data security   data sharing   data transfer   decision of adequacy   eavesdropping   ECPA   electronic communications   email   employee privacy   EU   FACT   financial privacy   FTC   health care   identity theft   international   invasion of privacy   membership programs   mobile   NLRB   online and consumer privacy   online behavior advertising   privacy training   retail privacy   robocalls   SCA   security   Shine the Light   social media   spyware   TCPA   telemarketing   telephone marketing   text messages   tracking and monitoring   transborder data flow   TSR   wiretap   workplace privacy  
Other Winston & Strawn Blogs
PRIVACY LAW CORNER
Welcome to Winston & Strawn's Privacy Law Corner, a blog where we cover recent developments in privacy and data security laws. We strive to give you not just updates, but an analysis of what lessons you can learn from these new cases, and practical tips to implement those lessons for your company. Our blog is edited by Winston & Strawn partner Liisa Thomas, and features authors from across the firm. To learn more about any of the cases or issues covered, please don't hesitate to contact one of us or your regular Winston & Strawn contact. To subscribe to these updates, please see the RSS icon at the top right of the page. You can also follow us on Twitter at @WinstonPrivacy.
About the Bloggers
Blog Tools Recent Postings | All Postings | Power Search | Attorney Login
June 18, 2013
Disclosures Located Only in Remotely Stored Images Violate CAN-SPAM

A federal district court in Utah recently found a marketer liable for $1.6 million in damages by default under the CAN-SPAM Act for making required advertising-related email disclosures only in remotely stored images (if at all) and using a proxy domain name registration service to obscure header information in its unsolicited commercial email messages. The marketing company, operating as Better Broadcasting, LLC and/or IONO Interactive, sent approximately 13,453 unsolicited commercial emails . . .

Liisa M. Thomas ; Caroline A. Wenzke

Read More Email comments to the authors
June 17, 2013
Securing E-voting For Company’s Staff Representatives Elections in France

There has been a significant growth in e-democracy in the last years, for all types of elections, and in many countries. E-voting improves the accessibility to the election for remote or disabled voters and allows easier and quicker counting of ballots. However, e-voting can facilitate electoral fraud or data protection breaches. The process has thus come under scrutiny by the French data protection authorities (the CNIL), to ensure that the system used for e-voting guarantees the positive id . . .

Liisa M. Thomas ; Blaise Deltombe

Read More Email comments to the authors
June 13, 2013
Company Agrees to Pay $300,000 to Resolve SEC Charge Over Employee Data Breach

Proxy advisor, Institutional Shareholder Services Inc. (ISS), recently agreed to pay a $300,000 fine arising out of a data breach after an SEC investigation. According to the SEC Order, an ISS employee revealed material, non-public information about clients participating in proxy contests to a proxy solicitor. In exchange for the confidential information, the proxy solicitor gave the ISS employee meals and expensive . . .

Sheryl A. Falk ; Liisa M. Thomas

Read More Email comments to the authors
June 12, 2013
HIPAA in the Cloud: Storing PHI May Make You a Business Associate Under HIPAA

The recently-promulgated final regulations under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) take a broader view of entities that are considered business associates and require additional contracting between business associates. One somewhat surprising "clarification" under these broader rules is that storage providers, including cloud-based storage providers, can be considered business ass . . .

Linda Lemel Hoseman ; Liisa M. Thomas

Read More Email comments to the authors
June 11, 2013
Requiring Employer Access to Social Media Accounts Prohibited in Washington

Washington Governor Jay Inslee recently signed into law SB 5211, which prohibits employers from: (1) requesting the personal social media log-in information of employees or applicants; (2) requiring that employees or applicants access their accounts in the employer’s presence; (3) requiring that employees or applicants add an individual to their contact list; and (4) requiring that employees or applicants change their privacy settings. The law has a carve-out for companies requesting soc . . .

Liisa M. Thomas ; Eric M.D. Zion; Beth K. Louie

Read More Email comments to the authors