An Urban Air Mobility (UAM) company, Wisk, announced its new partnership with NASA to assist with safely integrating autonomous aircraft systems at a national level. Wisk joins NASA as part of NASA’s Advanced Air Mobility National Campaign strategy in order to assist with the preparation and development of guidance for UAM operations. Wisk aims to
Smart Toys and How they May be Invading our Privacy
While smart toys can be useful educational tools for children, they also present some potential privacy risks and could invade what is traditionally considered a private space. Think about it—the thought of your child’s toy listening in on your family 24/7/365 is disturbing. So how do we balance these risks with the benefits?
Smart toys
New York Adds Text Messaging to its Definition of Telemarketing
This week, Governor Andrew Cuomo signed legislation that added text messaging to the state of New York’s definition of telemarketing communication for purposes of its no-call registry. The legislation, S.3941/A.6040, closes the loophole that previously exempted businesses from the no-call registry restrictions when the communication was sent via text. The goal is to increase protections
Canon Pushes for Dismissal for Lack of Standing in Data Breach Class Action
We previously wrote about the proposed class-action lawsuit against Canon USA Inc. that resulted from a data breach of former and current employees’ personal information. This week, Canon argued in New York federal court that the plaintiffs lacked standing and that the case should be dismissed. Canon stated in its memorandum of law that lost
Tune Up Processes Around Passwords and Access Controls
A new report from Beyond Identity focuses on old, but very important issues—ending access rights to network systems by terminated employees and the rampant sharing of passwords.
According to the report, it is estimated that almost 25 percent of previous workers still have access to their former employers’ networks through work accounts. This is concerning
Potential Consequences of the FAA’s Failure to Implement Section 2209
Section 2209 of the Federal Aviation Administration Extension, Safety, and Security Act (the Act) requires the Federal Aviation Administration (FAA) to establish defined boundaries protecting “critical infrastructure” from unauthorized drones. More specifically, the FAA is tasked with defining the precise sites where drones are prohibited from operating. It is likely that the FAA would have
British Airways Settles Data Breach Class Action
British Airways settled a data breach class action lawsuit this week resulting from a 2018 data breach that affected thousands of its customers.
In 2018, the personal data of approximately 420,000 customers and staff was leaked, including names, addresses, and bank account information. When U.K. regulators investigated this incident in 2018, it was reported that
Volkswagen and Audi Hit with Data Breach Class Action
This week, Volkswagen AG’s U.S. entity and its Audi brand were hit with a class action for a data breach that allegedly compromised 3.3 million consumers’ personal information. In the U.S. District Court for the District of New Jersey, a California consumer filed a suit against the automakers on behalf of other current and prospective
CISA Releases “Bad Practices” with Hope of Decreasing Cyber Blunders
The federal Cybersecurity and Infrastructure Security Agency (CISA) released a few cybersecurity “bad practices” this week to assist in decreasing the volume of knowable and preventable cyber mistakes. These bad practices are aimed at educating critical infrastructure owners and operators, as well as the defense industry and the organizations that support the supply
Colorado Mobile Home Park to Pay $25,000 for Data Breach
Last week, Impact MHC, a Colorado-based mobile home park management company, agreed to pay $25,000 to the Colorado Attorney General’s office and implement new security measures after a data breach of more than 15,000 individuals’ personal information, including 719 Colorado residents. If Impact fails to implement such security measures (such as creating a written information