Privacy & Security Law Report: Index-Summary

UNDERTAKING SPAM, SPYWARE, AND FRAUD ENFORCEMENT WITH ENFORCERS BEYOND BORDERS ACT (U.S. SAFE WEB ACT)

– Spammers must hand over $3.7M in FTC's first case (N.D. Ill.), 1019

UNIONS

See LABOR

UNITED KINGDOM (UK)

– Behavioral advertising

– – Collection of personal information online, ICO seeks input on drafting code of practice, 878
– – Competition authority to launch study on personal data use, 1287
– – Good Practice Principles, online ad trade group unveils, 405
– – Opt-in consent rule, apComms report supports over self-regulation, 1531
– – Phorm trials, EC wants protection details, threatens formal action against U.K., 310; EC launches legal action against U.K. for failure to regulate online behavioral ads, 593; EC legal action, Analysis and Perspective, 757; U.K. Prime Minister dismisses petition to review use by ISPs, 781; plans delayed as two ISPs back off, 1066; EC continues proceedings against U.K. over interception laws, 1569

– Binding corporate rules

– – Atmel Corp. and Accenture, U.K. approves BCRs, signaling start of speedier process, 699
– – eBay, ICO set to approve, 1616
– – Hyatt Hotels, ICO approves, first under new mutual recognition policy, 1374

– Construction worker database, ICO takes enforcement action against firm, 445; head of firm that unlawfully traded worker data to face criminal proceedings (U.K. Magis. Ct.), 801; database owner fined, enforcement action eyed against firms for use (U.K. Crown Ct.), 1064; ICO takes action against 14 firms for using, 1172
– Criminal data, job applicants may contest past conduct information, In Brief, 1619
– Data breaches

– – Billing Pharmacy, ICO enforcement action after computer theft, 1352
– – British Council says disk with staff payroll data lost in transfer, 209; ICO orders British Council to encrypt portable devices, 629
– – Car repair trade group laptop stolen, 1287
– – Highland Council ordered to encrypt laptops, In Brief, 1103
– – HSBC, U.K. regulator hits bank with record fine, 1099
– – Jubilee Marketing Agency, ICO takes action against insurance firm, In Brief, 1034
– – Legal expenses insurance firm and contractors ordered to encrypt mobile devices after laptop theft, 878
– – Leicester City Council, ICO takes enforcement action after breach of children's data at nursery, In Brief, 785
– – London Borough of Sutton government, ICO orders to revamp security after series of breaches, 1288
– – London Clubs Intl. agreed to encrypt all portable devices after laptop theft, 1151
– – Manchester City Council ordered to encrypt laptops, In Brief, 965
– – National Health Service (NHS)

See National Health Service (NHS), ICO enforcement actions, this heading

– – Neath Port Talbot County Borough Council ordered to encrypt all portable devices after losing memory stick, In Brief, 1103
– – Newspaper online jobs site admits to hacking incident, 1571
– – Pensions Trust reveals stolen laptop contains sensitive worker data, 802
– – Prisoner data breach larger than first reported, In Brief, 1292
– – RBS WorldPay, U.S. processing arm of Royal Bank of Scotland improperly accessed with actual fraud detected on cards, 9; consumer class amends complaint (N.D. Ga.), 274; RBS WorldPay to process U.S. credit card tax payments despite recent breach, 667; oral arguments set (J.P.M.L.), 775; panel consolidates claims, 873
– – Statistics, ICO reports significant increase in last 3 months, 282
– – Survey, half of businesses questioned by BSI had breaches, 838
– – UPS, encryption ordered after laptop stolen, 1206
– – Wigan Council laptop with children's data stolen, ICO examining, In Brief, 567; ICO orders encryption of mobile devices, 1288
– – Zurich Ins. lost back-up tape with data on U.K., S. Africa, and Botswana customers, 1532

– Data controller registrations

– – Doctors considered data controllers, ICO issues reminder after survey results, 1242
– – Law firms fined for not registering (U.K. Magis. Ct.), In Brief, 408; law firm and worker recruitment company fined, 802; accounting firm fined, 1572

– Data protection, ICO releases annual report, 1030
– Data retention

– – Internet traffic, new data rules take effect, guidance due soon, 565; comments sought, guidance include third party data comparison requirement, 674
– – Police

– – – Conviction data, police may retain (Eng. & Wales Ct. App. Civ. Div.), 1532
– – – DNA database to remove data from individuals who do not have criminal records, 1532

– Encryption

– – Laptop, Ponemon human factor survey, 114
– – Portable devices, ICO orders Home Office, 168

– Enforcement powers, ICO seeks enhanced powers in legislation, 168; parliamentary report issued, 282; information sharing proposals dropped from pending measure, 444; Joint Comm. on Human Rights report calls for ICO to have power to audit businesses, 503
– Faxes, ICO fines Clear Debt Solutions, 629
– Fingerprint data sharing agreement with Canada and Australia concerns Canadian Privacy Comm'r, 1283
– Google Street View, ICO rules that personal privacy not violated, In Brief, 634
– Health care, General Medical Council revises guidance on physician use and protection of patient data, 1437
– Information Comm'r, advertising standards chief Graham set to be named to replace Thomas, 87; Graham approved, 281; Thomas reviews tenure during release of annual report, 1030; Thomas joins Hunton & Williams Centre, In Brief, 1539
– Internet, parliamentary group launches inquiry into ISP role in catching bad actors, 675
– Junk faxes, U.K. ICO enforcement action against forklift firm, 1533
– National Health Service (NHS), ICO enforcement actions

– – Abertawe Bro Morgannwg Univ. NHS Trust, 169
– – Ashford and St. Peter's Hospitals NHS Trust, 1572
– – Brent Teaching Primary Care Trust, 282
– – Cambridge Univ. Hosp. NHS Found. Trust, 673
– – Camden Primary Health Care Trust, In Brief, 506
– – Central Lancashire Primary Care Trust, 673
– – Chelsea & Westminster Hosp. Found. Trust, 1065
– – Doctor must implement data destruction protocol, 1206
– – East Cheshire Trust, data disposal violations, 1207
– – Epsom and St. Helier Univ. Hosp. NHS Found. Trust, 1065
– – Grampian NHS, 1352
– – Hampshire Partnership NHS Trust, 169; 1065
– – Hastings and Rother Primary Care Trust, 310
– – Hull & Yorkshire Hospitals NHS Trust, 673
– – Imperial College Healthcare NHS Trust of St. Mary's Hosp., 1151
– – Lothian, 1151
– – Mid Staffordshire NHS Found. Trust, to implement working from home security policy, 1533
– – North West London Hospitals NHS Trust, 673
– – Royal Free Hampstead NHS Trust, 1065
– – Salford Royal NHS Found. Trust, 839
– – Southampton City Primary Care trust, 169
– – Surrey and Sussex NHS Trust, 1065
– – Tees, Esk, and Wear Valleys NHS Found. Trust, 169

– National ID cards, voluntary pilot plan to expand to Manchester, In Brief, 717; mandatory airport worker ID card dropped, to continue with voluntary plan, 988
– P2P file sharing rules, ISPs say not needed, In Brief, 211; new rule would require ISPs to notify users of alleged infringement, comments sought on report, 245; British creative industries call for ISPs to cut off persistent infringers, ISPs dismiss policing role, 782; British ISPs may be forced to block site of alleged P2P infringers, 937; U.K. may add technical measures, 1286; apComms internet privacy report opposes government proposal, 1531
– Penalties, U.K. seeks comments on jail terms for misuse of personal information, 1502
– Personal information management systems (PIMS), U.K. standards body seeks comments, 89; BSI British Standards launches voluntary standard for businesses, 838
– Privacy impact assessments, ICO issues updated guidance, 877
– Privacy notices, draft Code of Practice seeks to simplify, comments sought, 88; “small print big print” education campaign urges individuals to pay attention to small print, 283; U.K. issues to promote transparent use of information, 876
– Social networking websites

– – Data security, study finds sites skimp on or downplay to attract new users, 1150
– – EU data retention directive, U.K. proposes inclusion, 471

– Spam, Ireland increases fines, complaints increased, 20
– Stolen computers recovered, Lancashire Care NHS Found. Trust announces no data breached, 1502
– Telemarketing, Spain DPA fines firm for unsolicited calls abroad, six more cases waiting, 340
– Voice message conversion system, U.K. ICO questions use of humans to transcribe messages into text, 1100
– Woolworth's, ICO probes improper disposal of customer records, 282

UNITED NATIONS (UN)

– Cybersecurity, Intl. Telecomm. Union (ITU)

– – Legislation toolkit and guide for developing countries issued, 803
– – Telecom World 2009, experts seek heightened global efforts, 1476

– Data protection, global framework, Viewpoint, 62
– International Multilateral Partnership Against Cyber Threats (IMPACT) Center opens in Malaysia, 505

URUGUAY

– Data breach notification rules adopted, DPA recognizes EU adequacy decisions, 1479
– Data protection authority set up, EC certification process under way, 783; Uruguay finalizes rules, 1391

U.S. SAFE WEB ACT

See UNDERTAKING SPAM, SPYWARE, AND FRAUD ENFORCEMENT WITH ENFORCERS BEYOND BORDERS ACT (U.S. SAFE WEB ACT)

UTAH

– Child protection e-mail registry, adult entertainment group drops suit (D. Utah), 1473
– E-Verify, new law clarifies scope of mandate, In Brief, 541
– Medical identity theft, law requires patient identification, 510
– Sex offender law requiring disclosure of internet account information survives challenge (D. Utah), In Brief, 1294