Bill Proposes Jail Time for Executives Who Conceal Data Breaches

On October 31, 2022, the Federal Trade Commission (FTC) announced it has taken action against education technology provider Chegg Inc. (“Chegg”) for its “careless” cybersecurity practices that exposed sensitive personal information of millions of its customers and employees.  This action highlights the FTC’s continued efforts to aggressively protect consumer personal data. The FTC’s complaint alleges […]

The post FTC Takes Action Against Chegg For ‘Careless’ Security Practices Resulting in Four Breaches appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog.

On October 24, 2022, the Federal Trade Commission (“FTC”) announced a proposed consent order against both Drizly LLC, an online marketplace for alcohol delivery, and its CEO over the company’s alleged security failures that led to a data breach in 2020, which exposed the personal information of approximately 2.5 million Drizly customers. Drizly and its […]

The post Recent FTC Order Has Implications for Executive Liability and Corporate Data Minimization Practices appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog.

Less than a month ago, a critical vulnerability was identified in the ubiquitous, open source Log4j tool prompting swift guidance from Cybersecurity and Infrastructure Security Agency (CISA) and other security practitioners.  Now, the Federal Trade Commission (FTC) has warned companies that it “intends to use its full legal authority” against any company that fails to […]

The post FTC Releases Warning to Companies that Fail to Mitigate Log4j Vulnerability appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog.