T-Mobile to Pay $500 Million to Settle Its 2021 Data Breach

The U.S. mobile carrier T-Mobile agreed to pay $500 million to settle a class action lawsuit. The class action was filed by consumers following a cyberattack on T-Mobile’s systems last summer, which compromised the personal data of at least 76.6 million people – currently, the largest ever carrier breach on record.

According to the settlement authorized by the court, T-Mobile, ...

The FTC Warns Companies Against Unlawful Use of Sensitive Data

The U.S. Federal Trade Commission published a blog post stating that it will use the full scope of its legal authorities to protect consumers’ privacy against the over-collection, indefinite data retention, or misuse of their data.

Misuse of sensitive data such as mobile location and health information, might expose consumers to discrimination, stigma, mental anguish, or other serious harms. Such ...

Florida Reforms Cybersecurity Incident Reporting Obligations

A new Florida law requires state and local government agencies to report to the state’s Cybersecurity Operations Center any ransomware incident within 12 hours; and any emergency-level, severe-level, or high-level cybersecurity incident – within 48 hours.

Such reports must specify at least the following information:

  • A summary of the facts surrounding the incident.
  • The date of the last data backup, ...

British Cyber Security Center Urges Lawyers to Advise Against Paying Ransomware

In a letter addressed to legal professionals the British National Cyber Security Center (NCSC) explained that although the legal framework in the UK does not outright prohibit paying ransomware, the British government does not endorse or condone it either, and payers and the legal advisers advising them on this matter should be mindful of the possibility that certain sanctions regimes ...

Israeli Supreme Court Dismisses Petitions Against the National Biometric Database

The Israeli High Court of Justice dismissed the petitions filed against the Israeli biometric database law (officially called The Inclusion of Biometric Identification Measures and Biometric Identification Data in Identification Documents and a Database Law, 5770-2009). Since 2017, the law requires citizens seeking to issue identification documents (passports and IDs), to provide their facial images (and optionally, thumbprints), to be ...

Israeli Consumers Can Assert Lawsuits Against Facebook Under Israeli Law

The Israeli Supreme Court ruled that individuals and small businesses in Israel who use Facebook’s advertisement services may, in certain cases, assert civil claims against Facebook in Israel and under Israeli law. The governing law provision in Facebook’s terms, which provides that all lawsuits against Facebook will be asserted in California courts and under California law, is inconsequential.

The court ...

Turkey: Journalistic Investigation Reveals Government Mass Surveillance

An investigative journalism report by the Turkish news website Medyascope revealed that the Information Technologies and Communications Authority of the Turkish Ministry of Transportation (BTK) has been conducting extensive surveillance of citizens’ online activities for the past 18 months. Among the data collected by the BTK, are information about the websites visited, WhatsApp interactions, and location data.

According to Medyascope’s ...

California: New Consumer Privacy Regulations

The California Privacy Protection Agency (CPPA) published for public comment draft regulations implementing the reform in the state’s privacy law, given the overhaul of the California Consumer Privacy Act (CCPA) by the California Privacy Rights Act (CPRA) expected to take effect in January 2023.

The new regulations mainly focus on adapting the existing regulations (enacted under the CCPA) to the ...