2021

Remove notice-of-data-security-incident
article thumbnail

Your Business Experienced a Ransomware Attack, and It Was Not Prepared – Now What?

Burr Forman

The National Security Council has issued an open letter warning all businesses to be alert and prepared for ransomware attacks. While the IT team is involved in that effort, the internal incident response team should be assembled. It is hard to find a news post without a story on a ransomware attack. Internal Team.

Trade 92
article thumbnail

Think Fast: Banking Regulators Release Final Computer-Security Incident Notification Requirements

Troutman Sanders

On November 18, federal banking agencies [1] issued the long-awaited final rule, [2] establishing data security incident response notification requirements for “banking organizations” and “bank service providers” (terms defined below). Introduction. Final Rule Requirements. Federal Reserve: Banking organization means a U.S.

Banks 52
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Wisconsin Enacts Insurance Data Security Law Requiring Notification of Cybersecurity Incidents to Insurance Commissioner Within Three Business Days

Troutman Sanders

Entities that collect Wisconsin residents’ personal information and are licensed, registered, or authorized (licensee) with the Office of the Commissioner of Insurance (commissioner) will have to abide by a new data security law (Wisconsin’s Insurance Data Security Law), which came into force on November 1.

article thumbnail

Data Breach Notification Laws in the United States: What is Required and How is that Determined?

Burr Forman

Have you cataloged all the data you collect and where it is stored so that you can determine whose information is impacted by a breach? In most cases, substitute notice requires notification to be placed prominently on your website as well as distributed through the media, in print, on television, and/or by radio.

Banks 52
article thumbnail

Second Circuit Clarifies Article III Standing Threshold for Data Breach Class Actions

Troutman Sanders

26, 2021), which clarifies the circumstances under which plaintiffs alleging an increased risk of future identity theft or fraud due to the exposure of their personal data can establish Article III standing. Factual Background. The plaintiffs then sued CLA for negligence and violation of state consumer protection laws.

article thumbnail

No Federal Court Standing for Data Breach Claims Alleging Theft of Non-Sensitive Personal Information

Troutman Sanders

A federal court in California has ruled that the plaintiff in a putative class action alleging theft of non-sensitive personal information arising from a cybersecurity data breach lacks Article III standing to maintain his claims. Code § 1798.150(b) , Plaintiff provided written notice to Marriott on the same day he filed suit.

Lawyers 52
article thumbnail

Oregon Attorney General Reports Rise in Data Breaches

Troutman Sanders

Data breaches and ransomware attacks are on the rise. On October 7, Oregon Attorney General Rosenblum announced an increase in data breaches reported to his office. The first nine months of 2021 involved 131 reported breaches, exceeding the 2020 total of 110. earlier this year. earlier this year.