Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 20 MAY 2019

Privacy & Cybersecurity Update - March 2019

Skadden, Arps, Slate, Meagher & Flom LLP
Skadden, Arps, Slate, Meagher & Flom LLP
Contributor
Skadden, Arps, Slate, Meagher & Flom LLP

Skadden, Arps, Slate, Meagher & Flom LLP

Skadden has become a go-to firm in the German legal market since opening our doors in Frankfurt in...

View firm profile
Explore more from Skadden, Arps, Slate, Meagher & Flom LLP

In this month's edition of our Privacy & Cybersecurity Update, we examine new cybersecurity legislation in California and Massachusetts, the British government's updates to its cybersecurity laws in anticipation...

United KingdomPrivacy
James R. Carroll
James R. Carroll
Brian W. Duwe
Brian W. Duwe
David C. Eisman
David C. Eisman
Patrick Fitzgerald
Patrick Fitzgerald
Todd E. Freed
Todd E. Freed
Marc S. Gerber
Marc S. Gerber
Richard J. Grossman
Richard J. Grossman
Michael E. Leiter
Michael E. Leiter
Stuart D. Levi
Stuart D. Levi
+15 more

In this month's edition of our Privacy & Cybersecurity Update, we examine new cybersecurity legislation in California and Massachusetts, the British government's updates to its cybersecurity laws in anticipation of Brexit and outcomes from the International Association of Privacy Professionals' U.K. Data Protection Conference. We also review a class certification denial against banks regarding a retailer's data breach, the FTC's effort to seek public comment regarding the Gramm Leach Bliley Act and a new unilateral cybersecurity law passed in Thailand.

California Enacts Consumer Privacy Act

Massachusetts Adds New Requirements to Breach Notification Law and Credit Reporting Law

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Ten AI Giants, One Regulator And A Lesson For Everyone Else: What The ICO’s Foundation Model Report Really Tells Us

The UK's Information Commissioner's Office has completed its supervision of major AI foundation model developers, revealing significant gaps in data protection practices and setting new expectations for legitimate interests assessments, transparency, and special category data handling. The regulator has now turned its attention to agentic AI systems, warning that autonomy is not an excuse for poor compliance and launching a call for evidence that will shape future regulatory guidance.
United KingdomPrivacy
Burges Salmon LLP
Burges Salmon LLP
Article

ICO Cookie Crackdown 2.0: The ICO’s New Storage And Access Technologies Guidance

The UK Information Commissioner's Office has finalized its guidance on storage and access technologies, expanding compliance requirements beyond traditional cookies to include tracking pixels, device fingerprinting, and web storage. Organizations must now navigate stricter consent standards and three new narrow exceptions introduced by the Data (Use and Access) Act 2025, while facing significantly increased enforcement penalties of up to £17.5 million or 4% of annual worldwide turnover.
United KingdomPrivacy
ZwillGen
ZwillGen
Article

European Commission Press Release: EU AI Act Transparency Enforcement Starts This Sunday! Do You Know Who Your Chatbots Are? We Break Down The Commission’s Guidelines On Transparency Below

The European Commission has announced that EU AI Act transparency rules take effect August 2, 2026, requiring chatbots to identify themselves, deepfakes to be labeled, and AI-generated content to be marked. Organizations must assess whether their AI systems trigger disclosure, labeling, or content-marking requirements, with limited exceptions and penalties reaching €15 million or 3% of global turnover for noncompliance.
GlobalPrivacy
Seyfarth Shaw LLP
Seyfarth Shaw LLP
Article

ICO Launches Consultation On Draft Guidance Regarding Anonymisation And Pseudonymisation For Research Purposes

The UK's Information Commissioner's Office has opened a public consultation on draft guidance addressing anonymisation and pseudonymisation techniques for processing personal data in research, archiving, and statistical contexts. The guidance explores critical distinctions between anonymous and pseudonymous data, outlines required safeguards under UK GDPR, and examines emerging technologies including synthetic data and privacy-enhancing tools.
United KingdomPrivacy
A&O Shearman
A&O Shearman
Article

New York City’s Click-to-Cancel Rule: What Businesses Need To Know

New York City has enacted the nation's first municipal click-to-cancel rule, requiring businesses to provide clear disclosures, simple cancellation processes, and advance renewal notices for subscription services. With approximately 30 states already implementing similar regulations and the federal landscape in flux following the FTC's vacated rule, companies now face an increasingly complex patchwork of compliance obligations. The rule takes effect October 1, 2026, and imposes penalties ranging from $525 t
United StatesConsumer Protection
Skadden, Arps, Slate, Meagher & Flom LLP
Skadden, Arps, Slate, Meagher & Flom LLP
Article

California Joins New York In Regulating AI ‘Synthetic Performers’ In Advertising

California has enacted SB 1050, a groundbreaking law requiring clear disclosure when AI-generated synthetic performers appear prominently in advertisements. The legislation, which takes effect January 1, 2027, aims to protect consumers from being misled by artificial intelligence-created digital figures and voices while establishing enforcement mechanisms through existing false advertising statutes.
United StatesMedia, Telecoms, IT, Entertainment
Skadden, Arps, Slate, Meagher & Flom LLP
Skadden, Arps, Slate, Meagher & Flom LLP
Article

US Government Announces New Iran Sanctions Measures

The U.S. government has dramatically expanded Iran-related sanctions through new sectoral determinations, entity designations, and the suspension of key authorizations, while simultaneously targeting third-country financial institutions that facilitate Iranian transactions. These measures significantly broaden secondary sanctions risks across aviation, digital assets, gold, shipping, and technology sectors, marking a comprehensive escalation in economic pressure against Iran and its international networks.
United StatesGovernment, Public Sector
Skadden, Arps, Slate, Meagher & Flom LLP
Skadden, Arps, Slate, Meagher & Flom LLP
Article

Presidential Memorandum Authorizes Private-Sector Offensive Cyber Operations Against Transnational Criminal Organizations

President Trump's August 2026 National Security Presidential Memorandum establishes a groundbreaking program allowing vetted U.S. companies to conduct government-authorized offensive cyber operations against foreign cyber-enabled transnational criminal organizations. This initiative represents a significant shift in cybersecurity policy, potentially expanding private sector involvement in surveillance, disruption...
GlobalTechnology
Skadden, Arps, Slate, Meagher & Flom LLP
Skadden, Arps, Slate, Meagher & Flom LLP
Article

OCC And FDIC Finalize Standards For Unsafe Or Unsound Practices And MRAs

The U.S. Office of the Comptroller of the Currency and the FDIC have issued a joint final rule redefining "unsafe or unsound practice" and establishing new standards for matters requiring attention (MRAs) in bank supervision. How will these changes, which prioritize material financial risk over procedural deficiencies, reshape the regulatory landscape for financial institutions when they take effect in November 2026?
United StatesFinance and Banking
Skadden, Arps, Slate, Meagher & Flom LLP
Skadden, Arps, Slate, Meagher & Flom LLP
Article

CMS Finalizes The GLOBE Model: A Most-Favored-Nation Drug Payment Framework For Medicare Part B

The Centers for Medicare and Medicaid Services has published a final rule establishing the GLOBE Model, implementing most-favored-nation pricing for Medicare Part B drugs with dramatically expanded exemptions. Pharmaceutical companies face potential rebate obligations under this mandatory payment model, though the rule's narrowed scope and GENEROUS Model carve-out significantly limit its reach compared to the original proposal.
United StatesFood, Drugs, Healthcare, Life Sciences
Skadden, Arps, Slate, Meagher & Flom LLP
Skadden, Arps, Slate, Meagher & Flom LLP
Podcast

Analyzing NRSC v. FEC: What The Supreme Court’s Ruling Means For Parties, PACs And Donors (Podcast)

The Supreme Court's decision in National Republican Senatorial Committee v. FEC has fundamentally altered the landscape of political party spending by eliminating federal limits on coordinated expenditures between parties and candidates. This ruling preserves existing campaign finance guardrails while potentially reshaping the power dynamics of party committees, joint fundraising operations, and various political action committees.
United StatesGovernment, Public Sector
Skadden, Arps, Slate, Meagher & Flom LLP
Skadden, Arps, Slate, Meagher & Flom LLP