Page 5 - Sheppard Mullin Eye on Privacy 2018 Year in Review

CONTENTS
Data Security...................................................................................................................................................................................28 Update on Enforcement of China’s Cybersecurity Law.................................................................................................................28 FTC Cyber Guidance for Small Business has Tips Helpful to All.....................................................................................................29
Two Cyber Laws Go Into Effect Over US Labor Day Weekend......................................................................................................29 DOJ Report Suggests Direction For Addressing Cyber Threats.......................................................................................................30 Colorado Joins States in Passing Data Protection Requirements....................................................................................................31 Louisiana Adds Data Security Requirements to Breach Notice Law................................................................................................31 DHS Releases New Cybersecurity Strategy....................................................................................................................................31 White House Eliminates Top Cybersecurity Position.......................................................................................................................32 NY Issues Data Breach Report..........................................................................................................................................................33 Justice Department Creates Cyber-Digital Task Force.....................................................................................................................33 The Encryption Battle Will Continue in 2018................................................................................................................................34 2017 Saw Ransomware on the Rise – 2018 Will See Even More.................................................................................................34 2018 Likely a Year of Rising Government Standards for Securing Information..............................................................................35 Will 2018 Bring Developments in Government Access to Electronic Records?.............................................................................35 How Will Breach Laws Develop in 2018?.........................................................................................................................................36
Europe....................................................................................................................................................................................................................36 UK Regulator Issues Guidance About Encryption Under GDPR.................................................................................................36 Supermarket Held Vicariously Liable in UK’s First Data Leak Class Action....................................................................................37 UK Issues Fine for Unsolicited Funeral Marketing Emails................................................................................................................37 France Imposes Fine for Unauthorized Use of Fingerprint Timeclocks...........................................................................................37 UK’s Data Protection Authority Enforces GDPR..............................................................................................................................38 Dramatic Increase in French Privacy Complaints Since GDPR........................................................................................................38 UK’s ICO Fines Marketing Company Over Unsolicited Emails........................................................................................................39 EU and Japan Strike Tentative Data Transfer Deal............................................................................................................................39 FTC Signals that It Will Enforce Statements of GDPR Compliance.................................................................................................39 GDPR Celebrates One Month Anniversary......................................................................................................................................40 As GDPR Looms, Australia to Participate in APEC’s CBPR Program...............................................................................................40
Healthcare Privacy.......................................................................................................................................................................................41 Company’s Vendor Suffers Breach, No Business Associate Agreement, $500K OCR Settlement.........................................41 States Taking Actions Against Health IT Companies Over Data Breaches.....................................................................................41 FDA Issues New Draft Cybersecurity Guidance for Medical Devices.............................................................................................42
Texas Hospital Order to Pay $4.3M for Failure to Implement its HIPAA Security Policies.............................................................43 New York Settles EmblemHealth Breach for $575,000................................................................................................................43 HHS-OCR Closes 2017 with Six Figure Settlement in PHI Data Breach Impacting Over 2 Million Individuals...........................44
SEC...............................................................................................................................................................................................................................44 SEC Issues $1 Million Identity Theft Rule Fine......................................................................................................................44 You Might Be an Inside Trader If – Insider Trading and Data Breaches Part II............................................................................45 You Might Be an Inside Trader If... – Insider Trading and Breaches Part I.......................................................................................46 Crypto-Crime –The SEC and DOJ Go After BitFunder and Its BitFounder......................................................................................46 Privacy, Data Security, and Your Board – Day Five..........................................................................................................................47 Privacy, Data Security, and Your Board – Day Four..........................................................................................................................47 Privacy, Data Security, and Your Board – Day Three........................................................................................................................48 Privacy, Data Security, and Your Board – Day Two..........................................................................................................................48 SEC Takes Baby Steps on Cyber, but Signals Greater Vigilance......................................................................................................48 Privacy, Data Security, and Your Board – Day One..........................................................................................................................49
Eye on Privacy 2018 Year in Review 4