In arbitrato la prima azione di classe nei confronti di uno studio legale per violazioni privacy

Posted on by Federica Romanelli
La prima azione di classe per violazioni privacy nei confronti di uno studio legale USA sarà decisa in arbitrato. Il 15 aprile 2016, gli attori hanno instaurato un azione di classe nei confronti di Johnson & Bell, uno studio legale di medie dimensioni con sede a Chicago, accusandolo di esporre sistematicamente i dati personali dei propri clienti a rischi di divulgazione e di conservare tali dati senza un adeguato sistema di sicurezza. Secondo gli attori, lo studio legale avrebbe mantenuto Read more [...]

60% data breach increase in New York, the Attorney general announces

Posted on by Federica Romanelli
On March 21, 2017, Attorney General Schneiderman announced that his office received a record number of data breach notices in 2016. Around 1,300 data breaches were reported in 2016. This represented a 60% increase over the previous year; these breaches exposed the personal records of 1.6 million New Yorkers in 2016. Hacking represented the leading cause of all data breaches from 2006 to 2013. In 2016 hacking accounted for more than 40% of data security breaches. According to the AG press release, Read more [...]

Illinois federal court finds face-scan measurements derived from a photo qualify as biometric identifiers

Posted on by Federica Romanelli
On February 27, 2017, an Illinois federal court denied Google’s motion to dismiss a claim alleging that Google handles images in violation of the Illinois 2008 Biometric Information Privacy Act (BIPA). In a (putative) class action against Google Photos, plaintiffs alleged that the service collects, stores and uses- without informed consent and in violation of BIPA – the “users’ biometric identifiers and biometric information”. The BIPA forbids the unauthorized collection and storing Read more [...]

First data security class action against law firm is sent to individual arbitration

Posted on by Federica Romanelli
The first filed privacy class law against a law firm was sent to arbitration. On April 15, 2016, Plaintiffs filed the first class action complaint against a law firm for “systematically exposing confidential client information and storing client data without adequate security”. The complaint accuses Johnson & Bell, a mid-sized Chicago firm, of failing to keep its clients’ information secure. Allegedly, the firm’s computer systems suffered from critical vulnerabilities in its Read more [...]

Public employees’ communications about public business are subject to disclosure under the Cal. Public Records Act even if employees use personal account, Cal. SC. holds

Posted on by Federica Romanelli
On March 2, 2017, the California Supreme Court held that the electronic communications of a public employee about the conduct of public business may be subject to disclosure under the California Public Records Act (“CPRA”) even if the employee used a personal account. The court considered how the law, originally designed to cover paper documents, applies to evolving methods of electronic communications in an environment where not all employment-related activity occurs during a conventional Read more [...]