In the last week of May alone, the Investigation Bureau of Taiwan’s Ministry of Justice (“MOJ”) and local prosecutors from various districts raided the offices of 10 semiconductor, device, and display companies suspected of ties to mainland China, alleging illegal cross-strait recruitment of local engineering and managerial talent. The string of raids occurred in Taipei,
Privacy & Data Security Law Blog
Blog Authors
Latest from Privacy & Data Security Law Blog
SEC Proposes New Rules Requiring Cybersecurity Disclosures
The SEC intends for the new rules to provide investors and other market participants with timely, informative, and consistent disclosure about cybersecurity incidents, cybersecurity risk management and governance practices, and cybersecurity expertise.The SEC has proposed new rules that would require companies to make significant disclosures relating to cybersecurity incidents and preparedness. Specifically, the new rules…
Connecticut Passes Comprehensive Data Privacy Law
On May 10, 2022, Connecticut became the fifth state to pass a comprehensive privacy law, adding to the patchwork of such laws.On May 10, 2022, Connecticut became the fifth state to pass a comprehensive privacy law, adding to the patchwork of such laws. The law will go into effect on July 1, 2023, and applies…
Texas AG Sues Facebook to Enforce Biometric Privacy Law
Texas Attorney General Ken Paxton has sued Meta Platforms Inc., Facebook’s parent company, under the Texas Capture or Use of Biometric Identifier Act (CUBI) and the Deceptive Trade Practices Act (DTPA).Texas Attorney General Ken Paxton has sued Meta Platforms Inc., Facebook’s parent company, under the Texas Capture or Use of Biometric Identifier Act (CUBI) and…
Utah Enacts New Privacy Law
With the passage and signing of the Utah Consumer Privacy Act (“UCPA”), Utah joins the ranks of California, Virginia, and Colorado in enacting a comprehensive data privacy law. The UCPA will officially go into effect on December 23, 2023, and largely mirrors existing data privacy regimes in the United States, with a few notable exceptions.With…
Year in Review: Top 10 Privacy Impacts of 2021
The past 12 months witnessed the emergence of new comprehensive privacy laws in Virginia and Colorado, showing the continued appetite for consumer privacy protections in the United States. China passed a new privacy law, impacting multinational companies.Over the past 12 months, we witnessed two new comprehensive privacy laws in Virginia and Colorado, demonstrating the continued…
California Passes Genetic Privacy Act
California has enacted the Genetic Information Privacy Act (GIPA), the nation’s first privacy law specifically targeting the use of genetic information.California has enacted the Genetic Information Privacy Act (GIPA), the nation’s first privacy law specifically targeting the use of genetic information. The law targets direct-to-consumer genetic testing companies to provide—prior to collection of the sample—certain…
DOJ Launches Civil Cyber-Fraud Initiative to Enforce Federal Contractors’ Cyber Security Requirements
The Biden Administration has signaled that it views national cybersecurity as an important enforcement priority.The Biden Administration has signaled that it views national cybersecurity as an important enforcement priority. In May 2021, President Biden signed an Executive Order on Improving the Nation’s Cybersecurity, stating that “the Federal Government must bring to bear the full…
SEC Steps Up Enforcement of Investment Advisory Firms for Cyberattacks
On August 30, 2021, the Securities and Exchange Commission (SEC) published a press release announcing that it has penalized eight investment advisory firms in three enforcement actions for failing to adopt written policies and procedures reasonably designed to safeguard customer records and information, in violation of Rule 30(a) of Regulation S-P (17 C.F.R. § 248.30(a))…
Cross-Border Data Transfers Under the New PRC Data Protection Regime
China is poised to significantly update its current data-protection legal and regulatory framework by the upcoming passage of two new key laws.China is poised to significantly update its current data-protection legal and regulatory framework by the upcoming passage of two new key laws: 1) The PRC Personal Information Protection Law (PIPL); and 2) The PRC…