On August 11, 2025, the Office for Civil Rights (OCR) published updated guidance relating to the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule (Privacy Rule) in the form of two new FAQs. The FAQs clarify the OCR’s position on (1) permitted disclosures of protected health information (PHI) to value-based care arrangements and (2)
Smart Toys and How they May be Invading our Privacy
By Kathryn Rattigan on
Posted in Children's Privacy, Data Privacy
While smart toys can be useful educational tools for children, they also present some potential privacy risks and could invade what is traditionally considered a private space. Think about it—the thought of your child’s toy listening in on your family 24/7/365 is disturbing. So how do we balance these risks with the benefits?
Smart toys…
Privacy Tip #216 – Another Caution about Biometric Data
By Linn Foster Freedman on
Posted in Privacy Tips
Biometric information is unique to each of us, including our fingerprints, voice, face, iris, and DNA. We can’t replace our biometric data like we can a credit card. If it is compromised, it is compromised forever. It is uber sensitive.
Yet, many people give it away without a second thought. Luckily, there are privacy advocates…
EPIC Files Suit to Enforce Transparency Obligations related to U.S. Drone Policy
By Kathryn Rattigan on
Posted in Drones
Last week, the Electronic Privacy Information Center (EPIC) filed a lawsuit against the Federal Aviation Administration’s (FAA) Drone Advisory Committee (Committee) to enforce the open government obligations of the Committee. The Committee is an industry-led committee that advised the FAA regarding drone policy in the U.S. EPIC claims that for over one year, the Committee…
EPIC’s Standing Questioned in FAA Case
By Kathryn Rattigan on
Posted in Drone Privacy, Drones
On January 25, 2018, oral arguments were heard in Electronic Privacy Information Center (EPIC) v. the Federal Aviation Administration (FAA) case by a D.C. Circuit panel. The court questioned EPIC’s standing to contest the FAA’s regulations, which cover all Americans; EPIC alleges that the FAA’s omission of privacy safeguards in its small unmanned aerial systems…
EPIC Continues its Fight Against FAA for Drone Privacy Regulations
By Kathryn Rattigan on
Posted in Drones
The Electronic Privacy Information Center (EPIC) filed its 65-page brief in its case against the Federal Aviation Administration (FAA) this week, for the FAA’s failure to address privacy risks in its final small unmanned aircraft systems (UAS) rule (or Part 107 as its known). We previously reported on this case in April of last year,…
Final Drone Rule and Potential Privacy Implications For Operators
By Kathryn Rattigan on
Posted in Drones
Well, the Federal Aviation Administration’s (FAA) Part 107 commercial drone regulations are in full swing this week and without the inclusion of specific privacy standards, there are still concerns about privacy-related drone issues. As we reported last week, the Electronic Information Privacy Center (EPIC) filed a complaint against the FAA alleging that the final…
Sensor system technology to track a driver’s every move
By Kathryn Rattigan on
Posted in Data Privacy
A new, proprietary sensor system technology has arrived on the market that can track drivers using cameras and sensors, including whether the driver is speeding or turning without signaling, or even data such as the driver’s heart rate and blood pressure–it could even gather data about the passengers in the vehicle. The auto insurance industry…
EPIC files suit against FAA for lackadaisical drone privacy regulations
By Kathryn Rattigan on
Posted in Drone Privacy
On March 31, 2015, the Electronic Privacy Information Center (EPIC) filed a petition against the Federal Aviation Administration (FAA) with the D.C. Circuit court asking that the court review the FAA’s proposed rule on commercial drone use, which was released in February of this year, for its failure to include appropriate privacy safeguards. While the…
Privacy rights group speaks out against FAA’s proposed framework on commercial use of drones
By Kathryn Rattigan on
Posted in Data Privacy
On March 31, 2015, the Electronic Privacy Information Center (EPIC) filed a petition against the Federal Aviation Administration’s (FAA) proposed rule on commercial drone use, in the D.C. Circuit. EPIC believes that the FAA did not create privacy safeguards in its proposed rule as mandated by Congress. EPIC explains in its petition that Congress…