Photo of Christine Nielsen Czuprynski

This post was also written by Taisuke Kimoto, Matthew N. Peters, and Yumiko Miyauchi.

In recent weeks, Japanese data protection and privacy law has seen developments in two areas:

(1) The Ministry of Economy, Trade and Industry (METI) issuing its first code of practice on privacy notices
(2) The Asia-Pacific Economic Cooperation (APEC) approving Japan’s

This post was written by Daniel Kadar.

Implementing whistleblowing hotlines in France has caused significant concern for companies implementing such hotlines globally, as French regulation had considerably narrowed their scope with the major threat of considering non-compliant hotlines as null and void.

Times have changed: a couple of months ago, the French CNIL adopted

On 13 May the Court of Justice of the European Union (“ECJ”) delivered a ground-breaking ruling on the application of the Data Protection Directive 95/46/EC (the “Directive”) to internet search engine operators. In its eagerly anticipated judgment, the ECJ ruled on key issues including the circumstances in which search engines must block certain information from

As mentioned on our Life Sciences Legal Update blog, two separate HIPAA settlements resulted from investigations by the Department of Health and Human Services, Office for Civil Rights (OCR) into two self-reported instances of unencrypted laptop theft from health care entities.  In the first instance, OCR’s investigation found that the company had previously recognized a

Last Thursday, the Federal Trade Commission (FTC) announced that messaging app Snapchat agreed to settle charges that it deceived consumers with promises about the disappearing nature of messages sent through the app. The FTC case also alleged that the company deceived consumers over the amount of personal data the app collected, and the security measures

On Wednesday, April 23, 2014, Sao Paulo, Brazil will host NETmundial – the Global Multistakeholder Meeting on the Future of Internet Governance. Approximately 800 people will descend on Sao Paulo to spend two days and nights discussing, debating, arguing, cajoling, pleading, and demanding potential changes in the governance of the Internet. Hundreds more will participate

This post was written by Cynthia O’Donoghue.

At the end of March, the EU’s Article 29 Working Party adopted an opinion on Personal Data Breach Notification (the Opinion). The Opinion is designed to help data controllers decide whether they are obliged to notify data subjects when a ‘personal data breach’ has occurred.

A ‘personal

A New Jersey federal court is allowing the FTC’s case against Wyndham Worldwide Corporation to go forward, denying Wyndham’s Motion to Dismiss on both the unfairness and deception counts.  In this closely watched case, the court emphasized that in denying Wyndham’s request for dismissal, it was not providing the FTC with a “blank check to