Select Page

New Jersey Enacts Privacy Law

On January 16, 2024, New Jersey became the first state in 2024 to join a growing list of states implementing comprehensive consumer data privacy laws. SB 332 provides New Jersey residents with certain data privacy rights and creates related obligations on organizations that process their personal data. The new law becomes effective on January 15, 2025. 

NIST Releases SP 800-66r2: Implementing the HIPAA Security Rule

The National Institute of Standards and Technology (NIST) has recently published Special Publication 800-66r2, titled "Implementing the Health...

Warby Parker’s $1.5 Million HIPAA Penalty Highlights Critical Cybersecurity Obligations for Healthcare Entities

The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has imposed a $1,500,000 civil money penalty against Warby...

FTC Settles Data Broker Settlement Banning Sale of Sensitive Location Data

Organizations that collect, use, purchase, or sell sensitive location data should remain cautious of its data practices and the recent FTC...

Texas Data Privacy and Security Act – Part 1: Applicability 

In a digital era marred by big data monetization and weaponization and culminating in a renewed privacy awakening, Texas has taken a substantial...

CPPA to Resume Enforcement of CPRA Regulations

On February 9, 2024, the California Third Appellate District Court of Appeal made a significant ruling regarding the enforcement timeline of the...

About 

View additional information about Jeremy D. Rucker

Links

Privacy Policy

Contact

P: 214.459.5880

E: jrucker@spencerfane.com

Follow Me

FTC Settles Data Broker Settlement Banning Sale of Sensitive Location Data

Organizations that collect, use, purchase, or sell sensitive location data should remain cautious of its data practices and the recent FTC settlement with data broker X-Mode Social, Inc. (succeeded by Outlogic LLC). On January 9, 2024, the FTC published a press release detailing its settlement with the data broker regarding its practices of selling information that included consumer visits to sensitive locations. This settlement appears to be a direct result of the FTC asserting its policy objectives in light of the recent Dobbs case which overruled Roe v. Wade. This settlement serves as a reminder for all organizations to continuously analyze its data collection and processing practices and implement routine data hygiene procedures. 

Texas Data Privacy and Security Act – Part 1: Applicability 

In a digital era marred by big data monetization and weaponization and culminating in a renewed privacy awakening, Texas has taken a substantial...

Warby Parker’s $1.5 Million HIPAA Penalty Highlights Critical Cybersecurity Obligations for Healthcare Entities

The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has imposed a $1,500,000 civil money penalty against Warby...

New Texas Law Offers Cybersecurity Safe Harbor for Small Businesses

On June 20, 2025, Governor Greg Abbott signed Senate Bill 2610 into law, adding Texas to the growing roster of jurisdictions that extend a statutory...

Colorado House Bill HB24-1130: Strengthening Biometric Data Protections

Colorado's commitment to enhancing data privacy reaches new heights with the proposed amendments introduced in House Bill HB24-1130. This bill seeks...

LockBit Ransom Group Disrupted By Law Enforcement

The LockBit ransomware group has been successfully disrupted by law enforcement, marking a significant victory in the ongoing battle against...