New Hampshire Passes Comprehensive Privacy Law, Becoming 15th State to Protect Consumer Data

Concord, New Hampshire – New Hampshire has joined the ranks of states with comprehensive privacy laws, as Governor Chris Sununu signed SB 255 into law on March 6, 2024. With this move, New Hampshire becomes the 15th state to establish such legislation, aiming to protect consumer data in the digital age. SB 255 applies to individuals and businesses that conduct business in the state or produce products/services targeted at New Hampshire residents. The law specifies two thresholds for applicability: processing personal data of either 35,000 unique consumers or 10,000 unique consumers with a revenue share … Read more

Texas Judge Halts Paxton’s Move, Protects Privacy Rights of Transgender Minors

A Texas judge has issued a temporary order preventing Attorney General Ken Paxton from obtaining medical records of transgender minors. The decision came after a request made by Paxton to the Texas Department of Family and Protective Services to hand over records of children who have sought gender-affirming care. This move by Paxton was part of his ongoing legal battle against a state agency’s policy that allows transgender youth in foster care to access medical treatments without court approval. The judge’s ruling came in response to a lawsuit filed by four teens and three parents. … Read more

Navigating the Complex Maze of Online Data Privacy Regulations: An Added Challenge for Risk Managers

New York, NY — Online data privacy regulations are becoming increasingly complex for risk managers as states and countries introduce new measures. Anthony Dagostino, the New York-based global cyber chief underwriting officer for Axa SA, stated that staying up-to-date with regulatory issues is crucial for both underwriters and policyholders. Differing incident notification laws across US states present an additional challenge. Currently, 13 states have comprehensive privacy laws, while several others are in the process of developing legislation. The variability between state regulations makes it challenging for risk managers to respond to breaches effectively. Kristen Peed, … Read more

OpenAI Faces Potential Ban in Italy as Data Protection Authority Accuses Breach of EU Privacy Rules

Milan, Italy – The Italian Data Protection Authority (IDPA) has accused OpenAI of violating privacy and data protection regulations in the European Union (EU). According to a statement from the IDPA, OpenAI’s ChatGPT technology allegedly breaches the EU General Data Protection Regulation (GDPR), which governs information privacy within the region. The IDPA’s allegations stem from a recent investigation into OpenAI’s data scraping practices, prompted by complaints from civil society organizations. These organizations claim that OpenAI collected personal data without proper consent. It is essential to note that the IDPA’s statement does not imply guilt, and … Read more