Privacy and Data Security
Subscribe to Privacy and Data Security's Posts

California Employers: Your Online Job Advertisements Could Get Your Business in Hot Water

The California Department of Fair Employment and Housing (DFEH) recently announced a new affirmative effort to detect and correct violations of the Fair Chance Act (FCA)—California’s ban-the-box law—by using online technology to identify words and phrases in job advertisements that violate the FCA. The FCA was first enacted on January 1, 2018, to prohibit employers with five or more employees from asking job candidates about their conviction history before making them a job offer.

Read more here.




read more

Missing Participants, Cybersecurity Top Challenges for Plan Advisors

Missing participants and cybersecurity are among the top challenges for retirement plan advisors, according to participants at the National Association of Plan Advisors’ 2021 NAPA 401(k) Summit in Las Vegas. During the Summit’s opening day workshop session, McDermott Partner Erin Turley said advisors should make an effort to discuss cybersecurity with clients in advance of a US Department of Labor audit.

“The plan document says X, the recordkeeping agreement says Y, and maybe the (summary plan description) says something different—if it’s even addressed in the SPD,” Turley noted. “So make sure all those documents sync and your process actually matches your documents as equally.”

Read more here.




read more

FTC Issues Policy Statement Expanding Interpretation of Health Breach Notification Rule’s Scope

On September 15, 2021, the Federal Trade Commission (FTC) voted 3–2 along party lines (with Republican commissioners dissenting) to issue a policy statement announcing an expansive interpretation of the FTC’s Health Breach Notification Rule, 16 CFR Part 318 (the Rule). According to the policy statement, the Rule applies to health apps and connected devices that are not subject to the Health Insurance Portability and Accountability Act (HIPAA) but are capable of drawing information from multiple sources—for example, through a combination of consumer inputs and application programming interfaces (APIs).

Read more here.




read more

Protecting the Telehealth Consumer: FTC and State-Based Considerations

Telemedicine in the United States is facing an important crossroads. While telehealth services have demonstrated their value as an integral part of care delivery, federal and state waivers instituted during the COVID-19 pandemic are likely to expire soon. As lawmakers and agency officials consider updated or expanded digital health rules, regulators are expected to intensify their scrutiny of providers.

In this webinar, McDermott partners Jiayan Chen and Brian J. Boyle explore consumer protections for telehealth consumers, including the following:

  • Privacy considerations beyond the Health Insurance Portability and Accountability Act of 1996, including Federal Trade Commission requirements;
  • How to prepare for the Health Breach Notification Rule;
  • The ins and outs of advertising telehealth, including claims, endorsements and social media;
  • Strategies for engaging with users in the digital environment; and
  • Increased fraud enforcement.

Access the webinar.




read more

Global Employment Law Update

Employment law continues to evolve, and it can be a challenge amid an ever-changing landscape of local employment laws for human resources executives and employment counsel at multinational businesses to maintain a consistent global corporate culture.

McDermott’s Global Employment Law Update brings you the key highlights from across Asia, Africa, Europe, Latin and North America. Developed in collaboration with peer firms operating in more than 50 countries, this resource guide contains summaries of the laws and significant court decisions that impacted employers and employees all over the world. It includes:

  • COVID-19 legislative updates
  • Remote work and telecommuting policies
  • Data privacy protections
  • Minimum wage and salary compensation updates
  • Changes to labor protection laws
  • Sexual harassment modifications

Access the report.




read more

Access to Digital Health Applications and Digital Care Applications in Germany

The German federal cabinet recently approved the draft law on the digital modernization of healthcare and nursing care. The draft has been criticized for not taking into account lessons learned from the implementation of the 2019 digital health applications (DiGAs) law.

In this International News article, McDermott Will & Emery partner Dr. Stephan Rau and McDermott alumna Dr. Karolin Hiller provide insight into the planned German regulations on DiGAs and digital care applications (DiPAs).

Access the article.




read more

VIDEO: COVID-19 Vaccination and Five Key Considerations for Healthcare Employers

The question of whether or not to make vaccinations mandatory for workers is being considered by employers globally, particularly those in the healthcare sector. In this video, McDermott Will & Emery partner Carole A. Spink outlines some of the most common employer-related vaccine questions, including incentives and data privacy concerns. Spink and McDermott partner Paul McGrath recently also wrote for McDermott’s International News about this topic.

Access the article.




read more

VIDEO: Transfers of Health Data from the European Union to the United States in a Post-Schrems II World

In this video, McDermott Will & Emery partner Amy C. Pimentel explains the significance of health data transfers from the European Union to the United States in a post-Schrems II world. The recent Schrems II ruling invalidated the EU-US Privacy Shield, holding that the US legal regime on access to personal data does not contain adequate limitations and safeguards. Pimentel and McDermott’s Romain Perray recently also wrote for McDermott’s International News about this topic.

Access the article.




read more

EBSA Privacy and Cybersecurity Guidance

Andrew C. Liazos, partner at McDermott Will & Emery, recently moderated an American Bar Association panel on the new cybersecurity guidance for retirement plan sponsors issued by the Department of Labor (DOL). The panel slides included 10 takeaways for the new DOL guidance.

Access the slides.

As a background, the DOL’s new guidance formalized its long-held view that retirement plan fiduciaries have an obligation to ensure proper mitigation of cybersecurity risks. More specifically, the DOL expects retirement plan fiduciaries to select and monitor the cybersecurity practices of their service providers.

The DOL guidance is in three parts.

  • The first part provides plan fiduciaries with a framework for reviewing a vendor’s cybersecurity practices.
  • The second part provides a robust list of cybersecurity “best practices” for record keepers and other vendors responsible for plan-related IT systems and data. For example, the DOL recommends that all retirement plan vendors with critical participant data conduct a reliable annual third-party audit of their security controls.
  • The third part provides security tips for participants and beneficiaries who manage their retirement accounts online.



read more

OSHA Releases Guidance for Employers Considering Vaccine Requirements

Recently, the Occupational Safety and Health Administration (OSHA) released three new FAQs for employers who recommend or require employees to receive COVID-19 vaccines. OSHA is responsible for enforcing workplace safety standards across the US.

McDermott previously reported that employers can require employees to be vaccinated as a condition of employment, though employers should consider several factors before making the decision to require employee vaccinations. The new OSHA guidance highlights additional considerations when requiring employee vaccinations.

Access the article.




read more

STAY CONNECTED

TOPICS

ARCHIVES

Top ranked chambers 2022
US leading firm 2022