Across the country, we’re in the midst of “Unmanned Aircraft Systems ever” – industries from media, agriculture and energy to insurance, real estate and construction are seeking FAA approvals to fly UAS here in the United States. UAS technology has improved at a rapid pace, and offer a vast array of safety and efficiency benefits to companies for a wide variety of uses. But while the benefits from commercial uses of UAS are great, many have also been vocal with their privacy concerns. It may very well be that for industry to succeed, various stakeholders will need to engage in a national conversation surrounding these issues.
Emerging technologies, such as cloud computing and the “smart city,” have the potential to greatly advance our quality of life. The use, retention, and storage of data that go along with them, however, have raised citizen concerns about privacy risks. The National Institute of Standards and Technology addresses these concerns in a new draft report titled Privacy Risk Management for Federal Information Systems, which was released on May 29, 2015. The report introduces NIST’s Privacy Risk Management Framework, which anticipates and addresses privacy risk resulting from the processing of personal information. NIST intends that the framework will lay the foundation for establishing a common vocabulary that facilitates better understanding of (and communication about) privacy risks and how to effectively implement privacy principles. Although the report is directed at federal systems, the principles outlined may be useful for any business that processes personal information. The NIST report focuses on the development of two key pillars of the PRMF: privacy engineering objectives and a Privacy Risk Model.
Two federal appeals courts recently published significant opinions that redefine the scope of government access to phone records, setting the stage for a complex debate in Congress over the future of bulk data collection under the Patriot Act. The pair of decisions, along with the outcome of a legislative debate that has roiled Congress this month, will define the permissible boundaries for government surveillance and contribute to the ongoing debate over government access to digital information in all forms. We summarize both decisions as well as the congressional debate below.
FCC Chairman Wheeler has announced that he is circulating a proposal to address more than twenty pending petitions seeking clarity regarding the scope requirements under the U.S. Telephone Consumer Protection Act. He authored a blog post on the proposal and also released a fact sheet
Hogan Lovells is pleased to announce that its Privacy and Information Management practice has been named “Privacy & Data Security Team of the Year” by Chambers USA. Hogan Lovells was bestowed with the accolade at the Chambers USA Awards Ceremony and Dinner at Cipriani in New York City on 19 May.
This Wednesday December 3rd, Hogan Lovells partner Christopher Wolf will be moderating a panel hosted by the Future of Privacy Forum and the International Association of Privacy Professionals entitled: “Device encryption: Too Much Privacy for Consumers?” The panel is free and open to the public.
As the keynote speaker for the Winnik Forum, U.S. Federal Trade Commission (FTC) Commissioner Maureen Ohlhausen sat down with Christopher Wolf, Director of Hogan Lovells’ Privacy and Information Management Practice to discuss the evolving role of the FTC as we enter an era of “Big Data” and the “Internet of Things.” Commissioner Ohlhausen offered her views on a flexible approach to protecting consumer data privacy as connected devices continue to evolve. As opportunities arise for additional potential uses of collected data, Commissioner Ohlhausen said organizations and policymakers should consider a “harms-based approach” in which new uses of data would be allowed as long as they do not cause consumer harm and as long as they remain consistent with earlier promises that organizations have made to consumers. The key for Commissioner Ohlhausen is that companies should disclose what data is being collected and keep the promises that they make to consumers about the collection and uses of that data.
Hogan Lovells’ leading Privacy and Information Management practice is due to have its largest presence ever at the forthcoming IAPP Europe Data Protection Congress taking place in Brussels from 18 to 20 November. More than 20 lawyers from 7 offices will be attending and actively participating at the conference. Please come and visit us at Booth 3.
In an article published by re/code, Hogan Lovells Partner Christopher Wolf, working with Jules Polonetsky, Wolf’s co-chair at the Future of Privacy Forum, explores novel applications of Big Data in combatting discrimination and advancing civil rights. As highlighted by Wolf and Polonetsky, Big Data analytics has already begun empowering society to limit and remedy discrimination and follows the legacy of the Matthew Shepard and James Byrd Jr. Hate Crimes Prevention Act and the Hate Crime Statistics Act of 1990, which produce comprehensive statistics on hate crimes for law enforcement.
As commercial use of unmanned aircraft systems begins to take flight, the Hogan Lovells Privacy and Information Management practice has partnered with colleagues from across the firm to respond to the needs of manufacturers and operators of UAS. The launch of the group comes at a time when government activity to regulate UAS is creating both new opportunities and risks in the marketplace.
On Tuesday, October 28, Natalia Gulyaeva of Hogan Lovells’ Moscow office and Bret Cohen of our Washington, D.C. office will host a complimentary webinar outlining implications for businesses of the new Russian Data Storage Law. The law, which may come into effect as early as January 2015, requires that data “operators” – organizations that process personal data of Russian citizens, including providers of Internet-based services – to store the personal data of Russian citizens on databases located in the country.
From 13 to 16 October 2014, privacy regulators and data protection authorities from around the world will be gathering together with experts in the field – including our London-based partner Eduardo Ustaran – to discuss, debate and hopefully agree on how to address the toughest privacy challenges of our time. The 36th International Conference of Data Protection and Privacy Commissioners is entitled “A World Order for Data Protection – Our Dream Coming True?” This year’s conference is taking place in Mauritius, a clear sign of the truly global nature of this issue.
Hogan Lovells today published an update to the White Paper A Sober Look at National Security Access to Data in the Cloud, which compares national security access to data stored with Cloud service providers in a number of countries. The White Paper adds analyses of the laws of Brazil, Italy, and Spain, and reflects the April 2014 opinion of the European Court of Justice invalidating the EU Data Retention Directive. The updated paper now compares the national security access laws of the United States, Australia, Brazil, Canada, France, Germany, Italy, Spain, and the United Kingdom.
The Hogan Lovells Privacy and Information Management practice has received a “first tier” ranking from the ratings guide Legal 500 US in the “Technology: Data Protection and Privacy” category. Partners Christopher Wolf and Marcy Wilder were also each recognized as “leading lawyers” in the field. Legal 500 notes that the Privacy and Information Management practice at Hogan Lovells is “’among the best’ at advising ‘not only on where the law is, but where it is heading’.”
Leading privacy and data protection lawyer Eduardo Ustaran joins Hogan Lovells as a partner today, 4 June. He will lead the European team of the firm’s global Privacy and Information Management practice.
Chambers USA recently released their 2014 rankings, and we are pleased to announce that Hogan Lovells’ Privacy and Information Management practice once again received the recognition of Band 1 by Chambers USA. Chambers noted “the firm has a first-class collection of people when it comes to new technologies. They have been sage on these issues and have helped us to shape emerging areas of law.”
At the Privacy and Civil Liberties Oversight Board hearing yesterday in Washington, D.C., Hogan Lovells partner and privacy practice lead Christopher Wolf spoke on the issue of privacy and government surveillance and provided a transnational perspective on legal regimes that regulate government access to data. In 2012 and 2013, Hogan Lovells published four White Papers (available here, here, here, and here) on government access to data in the cloud. The findings of the national security access White Paper, A Sober Look at National Security Access to Data in the Cloud, were a focal point of yesterday’s discussion.
The Hogan Lovells Privacy Team looks forward to seeing many of you this week at the International Association of Privacy Professionals (IAPP) Global Privacy Summit in Washington, D.C. We are delighted to once again participate in the Summit as a gold level sponsor and hope you will visit us at Booth 7 in the Exhibition Hall to learn more about our Global Privacy and Information Management Practice. Hogan Lovells attorneys will also be featured at a number of breakout sessions.
The Hogan Lovells privacy team wishes you a happy Data Privacy Day! This post contains five tips to help protect your privacy in everyday situations.
The Evolving Legal Framework Regulating Commercial Data Security Standards, an article by Hogan Lovells associate Bret Cohen, was featured in the January/February 2014 cybersecurity law issue of the Maryland Bar Journal. The article covers the sources of regulation and potential legal liability in the U.S. for businesses who experience data security breaches, including general consumer protection laws, state data security laws, federal sectoral laws, and consumer class action litigation.
On February 6, 2014, members of Hogan Lovells’ Telephone Consumer Privacy Act Practice will host a webinar on recent TCPA developments and key compliance challenges for 2014. Among the topics that will be covered are how the Federal Communications Commission will apply the new “prior express written consent” requirements; what constitutes an “automatic telephone dialing system”; and whether and how the TCPA applies to mobile offerings and other new technologies and services.
With the new year fast approaching, the Federal Trade Commission and the National Telecommunications & Information Administration, a bureau within the Department of Commerce, recently announced a number of privacy initiatives for 2014 that will break new ground for both agencies and will impact a wide array of industries.
On 20 November 2013, Hogan Lovells hosted a cybersecurity seminar at its London offices, gathering a panel of experts in the field to discuss a subject that has become a growing concern for businesses worldwide. The seminar sought to address the cyber risks currently facing businesses, what businesses should do if a cyber attack occurs, the legal issues a business should consider when responding to a cyber attack, and the options for protecting your business with cyber risk and data protection insurance.
Earlier this week, The New York Times published “Europe Aims to Regulate the Cloud,” an article considering the impact on cloud computing of the proposed European Data Protection Regulation which quoted Hogan Lovells Partner Mark Taylor. Taylor commented that over-regulation in this area could impact the adoption and use of cloud services in the EU, and this in turn could have a broader economic impact given the level of penetration which cloud-related services are now achieving. This blog post contains a link to the article.