CJEU Restricts Retention of Communication Meta-Data by Telecom Providers

The Court of Justice of the European Union (CJEU) has held that EU law prohibits a general and indiscriminate retention of telecommunication meta-data. The court nevertheless held that EU states can require that telecom providers engage in targeted and limited retention of meta-data solely for the purpose of facilitating the fight against serious crime. 
 
The CJEU’s judgment was based ...

Biometric Database will Transition to Permanent Full-Scale Operation

The Israeli Minister of Interior, Mr. Aryeh Deri, has announced that the biometric database, nowadays nearing the end of its pilot phase, will transition to permanent, full-scale operation. The database, in its permanent phase, will include a facial photo and two fingerprints for each recorded individual.
 
Israelis applying to obtain or renew their government-issued ID or passports during ...

EU Regulators Issue First GDPR Guidance

The panel of European national privacy regulators, known as the ‘Article 29 Working Party’, has issued its first set of substantive guidance addressing issues under the EU General Data Protection Regulation (GDPR). The GDPR, scheduled to enter into force in May 2018, constitutes a sweeping reform in the areas of data protection and data privacy. The GDPR applies not only ...

Israel State Comptroller Criticizes Ill-Prepared Cyber Defense

The Israeli State Comptroller recently issued a summary of its comprehensive report, in which he dispraises Israel’s ill-preparedness against cyber threats. The summary raises, among others, the following points:

  • The process of developing a regime for allocating responsibilities in the field of cyber-defense has been dragging on for years and the process of formulating Israel’s overall cyber-defense doctrine has overrun ...

Israeli Court Holds: Online Trading Platforms in Financial Assets are not Akin to Betting

The Tel Aviv district court’s department of economic affairs recently dismissed a motion seeking class action certification of a lawsuit filed against online platforms trading on financial assets, including binary option trading, holding that these platforms do not violate the criminal prohibition against administering unlawful betting and gaming. Judge Danya Kareth Meyer held that trading on these platforms does not ...

US FDA Issues Guidance on Postmarket Management of Cybersecurity in Medical Devices

The US Food and Drug Administration (FDA) has published guidance informing of the FDA’s recommendations for managing postmarket cybersecurity vulnerabilities for marketed and distributed medical devices. The guidance emphasizes that manufacturers of medical devices should monitor, identify, and address cybersecurity vulnerabilities and exploits as part of their postmarket management. It urges manufacturers to implement comprehensive cybersecurity risk management programs and ...

Ninth Circuit Refines the Meaning of “Without Authorization” under the Computer Fraud and Abuse Act

The United States Court of Appeals for the Ninth Circuit has recently tweaked two of its decisions from this past summer which held that access to another person’s online account, even with their permission, may in certain cases give rise to liability under the U.S. federal Computer Fraud and Abuse Act (CFAA).

The first case, United States v. Nosal, revolved ...

Israel Extends Deadline for Compulsory Accessibility Adjustments in Websites

The Welfare Committee of the Knesset (the Israeli Parliament) decided to extend the deadline for Israeli websites required to make accessibility adjustments, by one year. Pursuant to the Israeli regulations on Equal Rights for Persons with Disabilities and the corresponding statute, virtually all Israeli websites would have had to adjust their interface in accordance with the World Wide Web Consortium’s ...