Category: Guidance and Legislation

California and the UK take the Lead in Securing Internet of Things (IoT) Devices

By Chase J. Wright, McNees Wallace & Nurick LLC   Set to take effect on Jan. 1, 2020, Senate Bill 327 and Assembly Bill 1906, together, require that manufacturers of internet-connected devices increase their security capabilities to better protect consumer data transmitted from those devices. The new California legislation, signed into law on Sept. 28,
Read More »

California’s New Data Protection Law Undergoing Scrutiny Ahead of Effective Date

By Chase Wright, McNees Wallace & Nurick LLC   Last year, the California legislature enacted the California Consumer Privacy Act of 2018, to date the most comprehensive data protection law passed in the United States. Commonly referred to as the “CCPA”, the new legislation is California’s response to growing data privacy concerns, particularly due to
Read More »

SB 308 Proposes 14-Day Data Breach Notice Requirement for Pennsylvania Businesses

By Thomas S. Markey and Chase J. Wright, McNees Wallace & Nurick LLC   In today’s tech-reliant business environment, companies increasingly maintain and store records electronically. With the luxury of going paperless comes the risks surrounding a potential data breach. If such a breach occurs and certain personal information is compromised, all U.S. states require
Read More »

U.S. Senate Celebrates Anniversary of World Wide Web with Hearings on Data Privacy Legislation

By Thomas S. Markey, McNees Wallace & Nurick LLC   Facebook.  Google.  Yahoo.  These companies, and many more, have made headlines related to their expansive collection and use of personal information, and for data breaches exposing that information.  Now, as the World Wide Web celebrates its 30th birthday, Congress considers whether a national data privacy
Read More »

New State Law Mandates Cybersecurity Enhancements

By Peter F. Johnson, Superior Court of Pennsylvania   California Governor Jerry Brown signed legislation mandating a longtime cybersecurity best practice—changing default passwords.  The use of weak default passwords is endemic to the consumer devices world, but is just as common in the world of enterprise computer equipment, on which corporate and customer data may
Read More »