Deceased Floridians maintain their Constitutional right to privacy

In this constitutional challenge to the 2013 amendments to sections 766.106 and 766.1065 of the Florida Statutes requiring claimants in a medical malpractice claim to disclose certain protected health information (PHI) and to consent to secret, ex parte interviews between health providers and defendant , the Florida Supreme Court held that the requirements were unconstitutional and that the right of privacy is not lost at death. The ruling concerned a medical malpractice claim brought by a Read more [...]

EU DPAs establishes a task force on Uber’s data breach

On November 29, 2017, the Working Party 29 (WP29) established a task force on the Uber  [adjust link] data breach case. This task force, led by the Dutch DPA, will be composed of representatives from the French, Italian, Spanish, Belgian and German Data Protection Authorities (DPAs), as well as from the ICO and will coordinate the national investigations on this important issue. The news is available at http://ec.europa.eu…   Originally published on Technethics on December 2017 Read more [...]

U.S. Supreme Court to decide whether Gov’t can force service providers to surrender information stored abroad

On October 16, 2017, the U.S. Supreme Court accepted the U.S. government’s request to review a previous appeals court ruling in favor of Microsoft, preserving service providers from surrendering information stored abroad. The U.S.’s highest court had to decide if companies have a right to refuse to comply with data disclosure demands made by the US government. Specifically, the Supreme Court had to decide “whether a United States provider of email services must comply with a probable-cause-based Read more [...]

New Jersey adopts Personal Information and Privacy Protection Act

On July 21, 2017, New Jersey adopted the “Personal Information and Privacy Protection Act.” According to the law, retailers may scan an ID card only under certain circumstances. By “scanning” the law means to access the barcode or any other machine-readable section of the card “with an electronic device capable of deciphering, in an electronically readable format, information electronically encoded on the identification card.” The Act provides a list of allowed purposes, which include: (1) Read more [...]

ICO issues data protection self assessment toolkit

The Information Commissioner Officer (ICO) published a checklists to assess businesses’ compliance with the Data Protection Act and find out what you need to do to comply with it. The ICO’s toolkit includes the following topics: Data protection assurance Getting ready for the GDPR Information security Direct marketing Records management Data sharing and subject access CCTV The ICO's data protection self assessment toolkit is available at https://ico.org.uk/...   Read more [...]