CYBERSECURITY

Halcyon Provides Intel on Volcano Demon Ransomware

Security research firm Halcyon recently reported that it “encountered” a new ransomware organization dubbed Volcano Demon several times in the past few weeks.

According to its report, Volcano Demon uses the encryptor LukaLocker with a .nba file extension. Halcyon provided an encryptor sample in its post. Read more

DATA PRIVACY

Rhode Island’s New Data Privacy Law

Some writers (not from my great state of Rhode Island) act like Rhode Island has been behind the times when it comes to data privacy and security when discussing the state's new privacy law. I feel a need to explain that this is just not so. Rhode Island is not a laggard when it comes to data privacy. Read More

ARTIFICIAL INTELLIGENCE

How to Keep AI From Blowing Up in Your Face: Simplified Version

Artificial Intelligence (AI) can offer manufacturers and other companies necessary assistance during the current workforce shortage. It can help workers answer questions from customers and other workers, fill skill gaps, and even help get your new employees up to speed faster. However, using AI comes with challenges and risks that companies must recognize and address. Read More

PRIVACY TIP

Privacy Tip #405 – Compromised Passwords Continue to Provide Easy Opportunities for Threat Actors

How often do you change your password? Do you use the same password for multiple platforms? Verizon’s 2024 Data Breach Report, published on May 1, indicates that “Over the past 10 years, the use of stolen credentials has appeared in almost one-third (31%) of all breaches…” Find out more in this week's Privacy Tip. Read more

RECENT EVENTS AND NEWS

Linn Freedman Quoted in Bloomberg Law Article Discussing Flaws in HHS Guidance

Data Privacy + Cybersecurity Team chair Linn Freedman was recently quoted in the article “Hospitals Get Reprieve on Tech From Court as HHS Weighs Privacy,” published in Bloomberg Law on July 3, 2024. Hospitals in the U.S. are proceeding with caution in resuming the use of technology that collects user information while the Biden administration considers a response to a court order authorizing the practice. The U.S Department of Health and Human Services (HHS) issued guidance requiring extra steps for health providers to protect data from third parties who could use the information to identify users. The guidance was blocked by a Texas judge citing the HHS lacked authority to issue its guidance, with some attorneys highlighting the flaws in HHS’ guidance.

Linn stated the guidance was “very difficult to interpret” and “unclear and contradictory.” Freedman added: “People surf websites for all sorts of reasons, none of which necessarily has to do with their own health. It is impossible for health care entities to know why someone is looking at their website." Read the article in full.

OneTrust Webinar: The road to 50 states: Rhode Island joins the U.S. privacy landscape with a new law

 Data Privacy + Cybersecurity Team chair Linn Freedman will lead a webinar discussion entitled “The road to 50 states: Rhode Island joins the U.S. privacy landscape with a new law,” hosted by OneTrust on July 16, 2024. Rhode Island became the 20th state in the U.S. to pass a privacy law as Governor Daniel McKee transmitted the Data Transparency and Privacy Protection Act (RIDTPPA) without a signature, allowing it to become law on June 25, 2024. Linn’s webinar will discuss the scope of the RIDTTPA, along with its requirements for controllers, practical recommendations and best practices for compliance, the similarities and difference to other U.S. privacy laws, and steps organizations can take to prepare for the act’s effective date of January 1, 2026.  More information.

Sean Griffin Presents at IADC’s 2024 Annual Meeting Discussing AI, IP Infringement, and Data Privacy

Artificial Intelligence (AI) Team lawyer Sean Griffin co-presented a program entitled “The Matrix Unraveled: AI, IP Infringement, and Privacy,” presented as part of the International Association of Defense Counsel (IADC) 2024 Annual Meeting, on July 10, 2024, in Vancouver, CA. Sean’s program discussed new challenges arising in the realms of IP infringement and data privacy risk, specifically, questions on how AI-generated original works fall under copyright protection and what happens when AI-generated works make unauthorized use of elements resembling the likeness of actors or musicians to commercially exploit their work. In addition, the program also discussed how the EU, US, and China are approaching the development of data privacy legislation. Sean serves as Vice Chair of IADC’s Communications for the Cybersecurity, Data Privacy, and Technology Committee.