The North American Securities Administrators Association (NASAA) this week approved an information security model rule package aimed at improving the cybersecurity posture of the 17,543 state-registered advisers.

The proposed model would require state-registered investment advisers to establish written cybersecurity policies and procedures designed to safeguard clients’ records and information, and to deliver its privacy policy

Hotel chain Fillmore Hospitality, LLC is the latest target of a proposed class action complaint filed this week, alleging violation of the Illinois Biometric Information Privacy Act (BIPA). We don’t usually discuss the specific allegations in BIPA cases, but since they continue to populate the litigation landscape, we thought it would be instructive to take

Two more companies are under fire for alleged violations of the Illinois Biometric Information Privacy Act (BIPA). 

Loews Hotel in Chicago was recently sued in the Circuit Court of Cook County for allegedly violating BIPA by collecting employees’ biometric information and sharing it with third parties without the employees’ consent.

According to the suit

Companies doing business in Illinois should consider getting up to speed on the Illinois Biometric Information Privacy Act (BIPA). We have reported on numerous (but not all) cases filed against technology companies and employers for alleged violations of BIPA [view related posts here]. The class action lawsuits continue to get filed at a rapid

In an effort to promote the development of new financial technology (fintech) products, Mick Mulvaney, Acting Director of the Consumer Financial Protection Bureau (CFPB), announced last week the creation of the Office of Innovation. Mulvaney said the new division, to be run by Paul Watkins under the umbrella of the CFPB, is designed to foster

In Belleville, Illinois, drones were used as part of a law enforcement investigation into a school threat this week. Both police and fire crews used their drones to monitor the school and to help determine whether there was a credible threat. Belleville Assistant Chief J.P. Penet said, “Our job was to operate in the air

Unfortunately, it was another busy data breach week. Here’s a summary of the major ones.

Delta Airlines admitted in a statement that the payment card data of several hundred thousand customers might have been compromised by malware between September 26 and October 12, 2017, through a third-party vendor ([24]7.ai that provides online chat services to

An Illinois federal judge has ruled that a fundraising company working for a nonprofit, tax exempt organization did not violate the Telephone Consumer Protection Act (TCPA) when it called a number listed on the National Do Not Call Registry because the activity fell within the nonprofit exemption of TCPA.

The ruling is significant as there

We have been following biometric cases in Illinois, including the case against Shutterfly [view related posts]. Late last week, an Illinois federal judge denied Shutterfly’s motion to dismiss the case against Shutterfly alleging that it violates the Illinois Biometric Information Privacy Act when collecting and storing face geometry scans through facial recognition software.

In

The Arizona Department of Health Services (ADHS) has notified 2,500 patients that their personal and health information has been lost in the mail.

The affected patients were mothers and newborns enrolled in the newborn screening program operated by ADHS. The compromised information was contained on paper records, including names, addresses, Social Security numbers, health insurance