Hawaii legislators have introduced several bills to amend the state’s data breach notice law. Two of these legislative measures would eliminate the “risk of harm” trigger for breach notification in Hawaii. Currently, notice to Hawaii consumers is required only “where illegal use of the [breached] personal information has occurred, or is reasonably likely to occur
Federal and State Legislation to Restrict Employer Use of Employee Credit Reports
On January 19, U.S. Representative Steve Cohen (D-TN) introduced H.R. 321, the “Equal Employment for All Act,” which would amend the Fair Credit Reporting Act to restrict employers from using consumer credit reports to make adverse employment decisions (e.g., hiring, promotion, termination) regarding prospective or current employees. The Act contains exceptions for, among other
What Wired’s “Ultra Personalized” Take on Privacy Means for You
Blog readers in the U.S. may have missed this month’s Wired U.K., which included “ultra personalized” covers that provided detailed information about each of a small number of subscribers who received it. The cover included hand-collected data about subscribers’ telephone numbers, social networking activities, eBay purchases, property sales, and other activities, and was designed
Israel Formally Obtains EU Adequacy
Today, the EU Commission formally approved Israel’s status as a country providing “adequate protection” for personal data under the European Data Protection Directive. The Data Protection Directive generally prohibits personal data from being transferred outside the EU unless the data is subject to an “adequate level of protection,” or certain narrow exceptions apply. As a
Towards a European Cloud Computing Strategy
Following on from ENISA’s recent report on cloud computing in government, Commissioner Neelie Kroes set out some further thoughts on a European Cloud Computing Strategy last week at Davos. In an encouraging sign for cloud providers and European industry more broadly, Commissioner Kroes spoke positively about the need to ensure that effective data protection and the