HR - Privacy & Surveillance

CCPA requirements are turning employers’ everyday data activity into potential compliance exposure. In this episode, Jackson Lewis Privacy, AI and Cybersecurity co-leaders Joe Lazzarotti and Damon Silver discuss the CCPA-defined “high-risk” activities that may trigger risk assessment obligations and offer practical guidance for building a workable assessment process, coordinating with vendors and documenting decisions in ways that supports compliance.

On May 19, 2026, the Federal Trade Commission (FTC) began enforcement of the Tools to Address Known Exploitation by Immobilizing Technological Deepfakes on Websites and Networks Act (TAKE IT DOWN Act), which requires certain covered platforms to remove nonconsensual intimate photos or videos shared

Service providers often receive or access a customer’s personal information when performing contracted services. In the employment context, service providers may include payroll processors, Human Resource Information System (HRIS) or Applicant Tracking System (ATS) platforms, outsourced IT support,

Baseball is often referred to as “America’s pastime,” but for some baseball fans, it may double as worktime. While employers have long known that workers occasionally play hooky to attend afternoon ballgames, viral videos and photos now show employees openly using laptops in the stands, raising lega

Escalating vendor cyber risk, tighter regulatory expectations and fast-moving AI-driven threats increasingly make checkbox diligence insufficient. In this episode, 360 Advanced’s Director of Compliance Strategy, Eric Ratcliffe, joins co-hosts Damon Silver and Joe Lazzarotti to discuss system and org

As the rate of retail thefts has increased in recent years, retailers have turned to more sophisticated technologies to prevent crime. The newer surveillance tools may implicate privacy laws, depending on the state and the circumstances.

As we have discussed in prior posts, AI-enabled smart glasses are rapidly evolving from niche wearables into powerful tools with broad workplace appeal — but their innovative capabilities bring equally significant legal and privacy concerns. In this Part 4, we consider the potentially vast amount of

As we have discussed in prior posts, AI-enabled smart glasses are rapidly evolving from niche wearables into powerful tools with broad workplace appeal — but their innovative capabilities bring equally significant legal and privacy concerns. In Part 1, we addressed compliance issues that arise when

When an organization’s data systems are compromised, they face the daunting challenge of sorting through mountains of sensitive data under intense regulatory pressure. In this episode of We Get Privacy for Work, hosts Joe Lazzarotti and Damon Silver are joined by Matt Morocco, Director and Cyber Pra

The federal Stored Communications Act (SCA) protects the privacy of personal emails and social media accounts that employees may access with company-owned devices. It provides for both civil and potentially criminal penalties for violations.

In the event of the disclosure of business trade secrets, organizations are often so overwhelmed that they overlook potential data breach notification requirements. The potential exposure of trade secrets is increasingly becoming intertwined with the release of legally protected personal information

With health care costs rising, recent legal developments have altered how medical debt shows up on credit reports that employers conduct on job applicants and employees. Employers may want to stay abreast of the changing legal landscape and exercise caution in how they use information about medical

Time for HR Professionals and In-House Employment Counsel to Add HR Data Privacy Risk Assessments to Their Repertoire Effective January 1, 2026, employers subject to the California Consumer Privacy Act (as amended by the California Privacy Rights Act) (CCPA) will be required to conduct a privacy ris

Oftentimes, organizations view training simply as another obligation; however, tailored and hands-on privacy and cybersecurity training are essential to safeguard data and ensure operations run smoothly in the event of a breach.

Lured by the promise of better productivity and compliance with company policies, employee monitoring tools are gaining a lot of traction among employers. On this episode of We get Privacy for work, we discuss the important privacy and legal implications that organizations must consider before imple

Class action lawsuits in response to data breaches have skyrocketed as plaintiffs look to take advantage of courts’ perceived leniency regarding standing.

Written Information Security Programs, commonly referred to as WISPs, are critical plans to have in place – not only to efficiently and effectively respond to ransomware attacks and data breaches when they occur – but to maintain compliant privacy practices for your organization.

To say mergers and acquisitions present significant risk is an understatement; however, additional vulnerabilities are being exposed as bad actors threaten to exploit privacy and data security leaks during the transition.

Remote work has given employers and employees pathbreaking flexibility, but it has also raised a host of data and employee privacy concerns.

Knowing what data your organization is collecting and from whom is critical to effectively respond to cybersecurity data breaches and prepare for future incidents.