On August 5, the New York Attorney General announced a settlement with Provision Supply, LLC, d/b/a EZcontactsUSA.com over a data breach resulting in the potential exposure of over 25,000 credit card numbers and other cardholder data. Provision Supply, the operator of EZContactsUSA.com, a Brooklyn-based e-tailer that sells contact lenses and eyewear, agreed to pay $100,000
On August 1, a New Jersey federal judge issued a one-page order dismissing a Telephone Consumer Protection Act class action based on the Supreme Court’s recent ruling in Spokeo, Inc. v. Robins.
In Susinno v. Work Out World, Inc., Plaintiff Noreen Susinno had a prior gym membership with Work Out World (“WOW”). According
The Court of Appeals for the District of Columbia shot down a putative class action brought against Urban Outfitters, Inc., and Anthropologie, Inc., which had alleged that the companies violated D.C. consumer protection statutes by collecting customer ZIP code information during in-store checkout. The July 26 ruling remanded the suit for dismissal, and held that
Federal courts continue to interpret and analyze the Supreme Court’s decision in Spokeo, Inc. v. Robins. Recently, a federal judge in New York permitted a lawsuit against Hearst Communications, Inc., to move forward after considering supplemental briefing on Article III standing.
Plaintiffs Suzanne Boelter and Josephine Edwards subscribe to magazines published by Hearst. Plaintiffs
Microsoft prevailed in its appeal to the Second Circuit from an order denying its motion to quash a warrant seeking a Microsoft user’s email stored on the company’s servers in Ireland. The ruling sets important precedent limiting the extraterritorial reach of the federal government in seeking to compel disclosure of private company data under the
Most organizations understand the importance of timely implementing software updates and patches. However, open platforms have permitted a level of customization such that a patch in one application may have unintended consequences in other parts of the overall system architecture, including customization of the software being updated. A good example is the recent Microsoft security
The FTC issued warning letters to 28 companies that allegedly advertised participation in the Asia-Pacific Economic Cooperative Cross-Border Privacy Rules system (“APEC CBPRs”), but had not received the requisite certification. A company seeking to participate in the CBPR system must first have its compliance established by an APEC-recognized accountability agent.
The APEC CBPRs is a
As we previously reported, Plaintiff Jonathan Torres filed a putative class action against Wendy’s in the wake of a data breach that the fast-food company suffered earlier this year. Wendy’s subsequently filed a motion to dismiss Torres’ complaint, which the U.S. District Court for the Middle District of Florida granted on July 15.
In
On July 8, European Union member states approved the Trans-Atlantic Privacy Shield data transfer deal, finally paving the way for the pact to be formally approved by EU and U.S. officials on July 12.
The Article 31 committee, which is made up of representatives of each EU member state, held their highly anticipated final
The Federal Trade Commission (“FTC”) issued a press release last week announcing it has assessed $950,000 in civil penalties against Singapore-based mobile advertising company InMobi for alleged violations of the FTC Act and the Children’s Online Privacy Protection Act of 1998 (“COPPA”). The penalty is part of InMobi’s settlement with the FTC over allegations that