July 2016

On July 19, the Consumer Financial Protection Bureau reached a $107 million settlement agreement with three individuals who conspired with World Law Group to swindle millions of dollars from consumers in a debt-relief scheme. 

In August 2015, the CFPB brought suit in U.S. District Court for the Southern District of Florida against several defendants, including

Most organizations understand the importance of timely implementing software updates and patches.  However, open platforms have permitted a level of customization such that a patch in one application may have unintended consequences in other parts of the overall system architecture, including customization of the software being updated.  A good example is the recent Microsoft security

The FTC issued warning letters to 28 companies that allegedly advertised participation in the Asia-Pacific Economic Cooperative Cross-Border Privacy Rules system (“APEC CBPRs”), but had not received the requisite certification.  A company seeking to participate in the CBPR system must first have its compliance established by an APEC-recognized accountability agent.

The APEC CBPRs is a

The FTC recently approved increases to the maximum civil penalty amounts available for violations of statutes subject to FTC enforcement.  The Federal Civil Penalties Inflation Adjustment Act of 2015 authorizes increases affecting sixteen statutes under FTC enforcement authority.

The amended maximums take effect August 1, 2016.

New maximum civil penalties for the following violations will

On July 13, the FTC filed a proposed settlement agreement in the United States District Court for the Southern District of Florida between a group of lead generators and the FTC and the Office of the Florida Attorney General.  The named lead generators included PC Cleaner, Inc.; Netcom3 Global, Inc.; Netcom 3, Inc.,

As we previously reported, Plaintiff Jonathan Torres filed a putative class action against Wendy’s in the wake of a data breach that the fast-food company suffered earlier this year.  Wendy’s subsequently filed a motion to dismiss Torres’ complaint, which the U.S. District Court for the Middle District of Florida granted on July 15. 

In

On July 13, a federal judge tossed out a challenge to the recess appointment of Consumer Financial Protection Bureau Director Richard Cordray.

In State National Bank of Big Spring et al. v. Lew et al., the State National Bank of Big Spring, Texas, joined by conservative advocacy groups The Competitive Enterprise Institute and

Health care entities and their business associates with access to electronic Protected Health Information (ePHI) are subject to the HIPAA Privacy & Security Rules. New guidance was just released regarding the requirements of the HIPAA Security Rule in the event of a ransomware attack. Additional information regarding the requirements of the HIPAA Privacy & Security

On June 23, a discussion draft ofThe Financial CHOICE Actwas released by the House Financial Services Committee.  A primary purpose of this bill is to replace the Dodd-Frank Act, including reforming financial institution regulations and significantly changing the structure and authority of the Consumer Financial Protection Bureau.   

Specifically, the

After the Supreme Court vacated and remanded the Ninth Circuit’s decision in Spokeo, Inc. v. Robins, the parties again appeared before the lower court, arguing over whether a purely technical violation of the Fair Credit Reporting Act is sufficient to satisfy the concreteness requirement for Article III standing.  

As we previously reported, on