Monthly Archives: November 2019

InfoTrax Systems Settles FTC Allegations It Failed to Safeguard Consumer Data

InfoTrax Systems, a Utah-based technology company, has agreed to implement a comprehensive data security program to settle Federal Trade Commission allegations that the company failed to put in place reasonable security safeguards, which allowed a hacker to access the personal information of a million consumers.  InfoTrax Systems, L.C., provides back-end operation services to multi-level marketers. This includes such services as compensation, inventory, orders, accounting, training,… More

The Increasing Importance of WISPs

The Boston Bar Journal has published an article of mine on written information security policies, or WISPs, which are required in certain jurisdictions (such as Massachusetts) and are becoming increasingly important privacy and security tools for companies.  You can read the article here. More

CCPA Amendments – and a Ballot Initiative on the Horizon

October brought three new developments to California’s comprehensive data privacy law, the California Consumer Privacy Act (“CCPA” or “Act”).  First, the state enacted a series of amendments to the CCPA that both clarify ambiguities and create new exceptions.    Second, we learned that the organization whose 2018 ballot initiative pushed California to enact the CCPA is planning to introduce another data privacy ballot initiative in 2020.  Finally, California’s Attorney General published draft regulations for notice and comment.… More