I OVERVIEW Technology disputes in Italy involve a large and varied amount of litigation, ranging across sectors covered by traditional patents (mechanical, electronic and pharmaceutical), telecommunications and other fields that are often hotbeds of new industry technology standards that can be protected by standard-essential patents (SEPs). Such standards may, in turn, generate licensing disputes. Disputes also often occur in sectors that involve more innovative and trend-setting technologies, such as the use of algorithms, artificial intelligence…
The European Data Protection Board (EDPB) recently published the draft Guidelines on Examples Regarding Data Breach Notification, a document that encompasses eighteen examples of data security incidents, on a spectrum of risk and necessary mitigating measures. Each example concludes with recommended actions based on the identified risks, mainly: recording the incident in the organization’s internal register, notifying the organization’s supervisory authority, and notifying affected individuals. The Guidelines are currently open for public consultation. The Guidelines include…
Adding to an emerging trend of federal cases addressing privilege in the context of forensic reports, the DC District Court ruled last month that forensic reports created in response to a cybersecurity incident were not subject to attorney-client privilege nor attorney work product protection because the reports were created in the ordinary course of business. This decision has significant implications for organizations preparing to respond to cybersecurity incidents and continues a pattern of increased scrutiny…
Brian Hengesbaugh and Partner Paul Glass dissect the recent guidance issued by the ICO in response to the SoldWinds cyber attack.
The Hamburg Commissioner for Data Protection and Freedom of Information (“Hamburg DPA”) imposed a 35.5 million Euro fine on a global fashion company’s subsidiary in Germany for violations of the GDPR. This million Euro fine is the highest fine known in Germany so far. It follows: the 14.5 million Euro fine imposed in October 2019 by the Berlin Commissioner for Data Protection and Freedom of Information (“Berlin DPA”) against a real estate company for violating…
On July 1, 2020 California’s attorney general started enforcing the California Consumer Privacy Act by sending letters to companies with requests to cure alleged violations, as contemplated by the CCPA. The legislation took effect on Jan. 1, 2020, as part of the California Civil Code, and called on the attorney general to enforce the law within six months of enacting regulations or July 1, 2020 the latest. The CCPA regulations became final only on Aug.…
Now that the California Consumer Privacy Act is in effect, it is imperative to consider the potential litigation risks that many companies are likely to face as a result of the new law. While many commentators have analyzed the CCPA’s express private right of action for data breaches that occur in the absence of reasonable security measures, it’s important to note that class litigation may be used in an attempt to privately enforce the other…