Cyber, Privacy, and Technology Report: May 2024
The world of cyber, privacy, and technology is constantly evolving, with new laws, regulations, and industry updates shaping the landscape. Here’s a roundup of some of the most significant developments in these areas:
State Actions:
– The Illinois House passed a bill to limit damages under the Biometric Information Privacy Act, which is expected to be signed into law by Governor Pritzker.
– Colorado signed an AI act into law to regulate the private-sector use of AI systems and address discrimination issues.
Regulatory:
– HHS OCR updated its guidance on Change Healthcare notifications, allowing the company to perform all required HIPAA breach notifications.
– The US sanctioned individuals and entities associated with the 911 S5 botnet, which compromised 19 million IP addresses.
– The SEC charged Intercontinental Exchange with failing to report a cyber intrusion, resulting in a $10 million penalty.
Litigation & Enforcement:
– The US Court of Appeals set an expedited schedule for TikTok’s challenge to a law requiring ByteDance to divest itself of TikTok.
– Quebec published a regulation concerning the anonymization of personal information, setting compliance requirements for organizations.
International Updates:
– The UK enacted a law requiring stricter security standards for IoT devices to prevent cyber-attacks.
– The Netherlands released a report on the use of facial recognition programs, specifying conditions for their use.
– France’s data protection authority published guidance on the installation of surveillance devices in nursing homes.
Industry Updates:
– The Department of Health and Human Services provided $50 million to enhance hospital cybersecurity.
– United Health Group confirmed a $22 million ransom payment to cybercriminals who attacked its subsidiary Change Healthcare.
– Kaiser Permanente disclosed that patient information was exposed to third parties through tracking software on its website.
These developments highlight the importance of staying informed about cyber, privacy, and technology issues to navigate the evolving landscape effectively. Stay tuned for more updates in the next edition of the Cyber, Privacy, and Technology Report.
