In a very comprehensive post from the Federal Trade Commission’s Office of Technology, the FTC takes what it calls “[a] deep dive into the technical side of FTC’s recent cases on digital health platforms, GoodRx & BetterHelp.”

As most readers know, the FTC recently took enforcement action against GoodRx and BetterHelp, two digital healthcare platforms, for allegedly sharing user health data with third parties for advertising.… More

Given the recent failures of Signature Bank and Silicon Valley Bank, we know clients are looking to set up new banking relationships and moving money around, especially by wire transfers.  It will not come as a surprise that bad guys see this as an opportunity to prey on folks who are trying to access funds needed to make payroll or other basic business expenses.  This is just what the criminal “man in the middle” attacker wants – a time when businesses have let down their guard and hackers can induce fraudulent wire transfer.  … More

Foley Hoag is pleased to contribute to Lex Mundi’s report on global data privacy trends and topics.  Our Lex Mundi network gives us access to the best attorneys in data privacy in jurisdictions across the globe, who provide local expertise on anticipated regulatory risks to overcome related to cross-border data and cybersecurity challenges. To access the full report, click here. More

Editors’ Note:  How does ChatGPT fare in writing a law firm blog post?  We asked ChatGPT to write one . . . 

PROMPT:  Write a 500 word blog post, in the style of a law firm blog post, on ChatGPT, focusing in particular on questions of privacy, cybersecurity, and ethics.

OUTPUT:

ChatGPT is a large language model developed by OpenAI that has the ability to generate human-like text on a variety of topics.… More

When it comes to website privacy compliance, cookies have consistently presented the most fraught issues for U.S. businesses.  This is especially true for those businesses that find themselves in a sometimes new or often uncertain relationship with the EU or UK GDPR.  Do I need a cookie banner?  Where does it go?  How big does it have to be?  Will a privacy policy alone do?  Can’t users just be directed to the appropriate place to disable their browser’s cookie collection? … More

On August 22, 2022, the Federal Trade Commission (“FTC”) indicated through the Advanced Notice of Proposed Rulemaking its intent to limit commercial surveillance – the common corporate practice of collecting, analyzing, and monetizing consumers’ data. As slews of data breaches resulted in millions of dollars in settlement and countless consumers whose data had been jeopardized, 33 states, including Massachusetts, New York, and Texas, showed support for the FTC’s proposed rule through a comment letter dated November 17,… More

Key Takeaways:

• Insurance renewal season is upon us.  Now is the time to make sure your insurance coverages are aligned with your business needs over the coming year.
• Consumer privacy laws are changing and developing rapidly.
• Enhanced protections for consumers’ data, particularly biometric and sensitive personal information, have implications for a variety of businesses and industries.
• Colorado is and will likely continue developing laws that protect consumers’ personal information and may open businesses up to increased exposure to liability.…

More

Governor Charlie Baker recently took steps to strengthen cybersecurity in Massachusetts by signing an executive order on December 14, 2022 creating an advisory panel to improve the state’s cyber defense. The new state task force will assess existing resources, develop contingency plans, and identify strategies for preventing future cyberattacks.  The goal of the task force is to ensure that the Bay State is at the forefront of the ever-evolving cybersecurity landscape.… More

On December 1, 2022, the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services issued a bulletin to highlight the obligations of Health Insurance Portability and Accountability Act of 1996 (HIPAA) on covered entities and business associates under the HIPAA Privacy, Security, and Breach Notification Rules (“HIPAA Rules”) when using online tracking technologies.  These online tracking technologies, like Google Analytics or Meta Pixel,… More

On September 19, 2022, a Massachusetts federal District Court denied Boston Globe Media Partners LLC’s motion to dismiss a consumer class action suit against it. This case is one of 47 proposed class actions filed since February 2022 against various companies, each based on a company’s use of Meta’s Pixel tracking tool.

Boston Globe Media Partners is a “multimedia organization that provides news, entertainment, and commentary across multiple brands and platforms”;… More