I’ve recently had the opportunity to participate in or moderate several panels on cloud computing, addressing issues such as governance, security, privacy, and legal liability.
One issue that frequently comes up is whether cloud computing is really new or different. That depends on how you look at it. As a legal matter, the model itself
April 2011
Epsilon Data Breach Highlights Security Challenges in the Cloud
Email marketing company Epsilon announced last week that its databases had been hacked, compromising customer names and e-mail addresses for a number of major companies that outsource their marketing communications to Epsilon.
The Epsilon data breach illustrates some of the security challenges when dealing with cloud computing environments. Although there are security risks associated with…
Do-Not-Track Legislation Unveiled in California
As we previously posted, Rep. Jackie Speier (D-CA) introduced federal do-not-track legislation in February. California State Senator Alan Lowenthal announced at a press conference earlier this week that he is backing a similar bill in the California legislature, with the support of Consumer Watchdog and other public advocacy groups. SB 761, as amended, directs…
Government Scrutiny of Locational Privacy Increases
Although concerns about locational privacy are hardly new, recent developments suggest that policymakers and government officials are taking a close look at the privacy issues raised when geolocation data is collected via smartphones.
- The Wall Street Journal reports that a federal grand jury in New Jersey is probing the data collection practices of smartphone applications. According
…
German Support for Czech Court Decision is a Further Setback for EU Data Retention Directive
On Tuesday the German Working Group on Data Retention endorsed the Czech Constitutional Court’s decision to annul a Czech data retention law. The Czech court held that the law, which included a blanket obligation on telecommunication companies to retain Czech citizens’ telephone, mobile phone, e-mail and Internet access records, was incompatible with Czech citizens’ fundamental right…
Landmark EU Agreement on RFID Signed
Today the European Commission, European data protection and information security authorities, NGOs and industry groups signed the Privacy and Data Protection Impact Assesment Framework for RFID Applications, which establishes a self-regulatory mechanism for ensuring data protection in the field of RFID (Radio Frequency Identification). RFID technology – so called “smart tags” – can be found…
Getting Ready For Reach: Substances Of Very High Concern
Originally published as Covington E-Alert in April 2011
THE REACH REGULATION AND SUBSTANCES OF VERY HIGH CONCERN
The European Union’s Regulation (EC) No. 1907/2006 on the Registration, Evaluation, Authorization and Restriction of Chemicals (“REACH Regulation”) requires the European Chemicals Agency (“ECHA”) to identify so-called Substances of Very High Concern (“SVHCs”) and to list them in…
Privacy increasingly a factor in antitrust/competition law analysis
I attended the ABA’s Antitrust Law Spring Meeting the last two days. What struck me the most was the increased prominence of data and privacy as factors in analysis of markets and competition in antitrust law. This was the topic in the Chairman’s Showcase session on Thursday. Julie Brill, the FTC Commissioner, perhaps made the…