Articles Discussing Privacy And Surveillance In The Workplace.

The U.S. Department of Health and Human Services (HHS) recently released a proposed rule to better protect electronic health data from cybersecurity threats. The proposed rule would apply to health plans, healthcare providers, healthcare clearinghouses, and their business associates, such as billing companies, third-party administrators, and pharmacy benefit managers.

Around the country, the weather is turning wintery, but in the privacy arena, there will be a blizzard as five state comprehensive privacy laws become effective.

Here is an overview of businesses needing to prepare.

1. Delaware Personal Data Privacy Act (DPDPA)

The DPDPA takes effect on January 1, 2025.

In today’s digital landscape, many organizations will likely face the unfortunate reality of a breach of employee data. The human resources department is the critical link between safeguarding a company’s reputation and championing employees’ data privacy rights. The first article in this series provided an overview of privacy basics. The

Employers should be mindful of whether workforce tracking technology, including AI, may provide information, such as employee performance scores, that triggers FCRA compliance. The FCRA protects both job applicants and employees. Education about basics of the FCRA is key for all employers, including in-house counsel, due to the proliferation of

In today’s data-driven environment, effective communication during a cybersecurity breach is crucial for maintaining employee trust and confidence. This fourth article in our five-part series on employee data privacy focuses on strategies for effectively communicating with employees after a data breach. The first article in this series provided an overview

In today’s digital landscape, many organizations will likely face the unfortunate reality of a data breach. This third installment of a five-part series on employee data privacy discusses five considerations for HR professionals managing an incident involving a breach of employee data, including how to navigate the situation effectively. The

Virtually all organizations have an obligation to safeguard their personal data against unauthorized access or use.  Failure to comply with such obligations can lead to significant financial and reputational harm.

In a recent settlement agreement with the SEC, a New York-based registered transfer agent, Equiniti Trust Company LLC, formerly known

“Cybersecurity” has emerged as one of top risks facing organizations. Considering the steady stream of massive data breaches affecting millions (sometimes billions), the debilitating effects of ransomware on an organization’s information systems, the intrigue of international threat actors, and the mobilization and collaboration of national law enforcement to thwart these

As organizations continue to take steps to prevent cyberattacks, a near-universal recommendation is that they should implement multi-factor authentication (MFA), and for good reason. Organizations subject to the updated FTC Safeguards Rule, for example, are required to implement MFA. The Cybersecurity & Infrastructure Security Agency (CISA) includes MFA as a

By: Employers Urged To Revisit Existing Privacy Policies Following Executive Order Mandating Protection Of Sensitive Personal Data 

By: Employers Urged To Revisit Existing Privacy Policies Following Executive Order Mandating Protection Of Sensitive Personal Data 

President Biden issued an Executive Order on February 28, 2024 to prevent access to U.S. Citizens’ sensitive personal