Connecting the Dots: Privacy Law Updates from the Nutmeg State
On June 24, 2025, the Connecticut governor signed into law SB 1295, a bill amending the Connecticut Data Protection Act (CTDPA). The…
Elizabeth is a member of the firm’s Privacy & Data Security Practice Group and has practiced exclusively in that subject matter for 20 years. Her practice addresses all aspects of U.S. privacy and data security law, as well as GDPR and international data transfer mechanisms. Elizabeth enjoys helping clients with compliance initiatives to address privacy and data security and has assisted with a wide variety of implementation projects including privacy or data security assessments, data subject rights platforms, telehealth, health information exchanges, mobile applications ranging from wellness programs to ecommerce to gaming, precise location tracking, biometric authentication, and complex customer insights initiatives including fraud prevention. Elizabeth also supports all aspects of data breach preparation and response, including leading forensic investigations, advising on ransomware response, supporting notification to affected parties, coordinating with law enforcement, and handling government agency notifications and inquiries.
View Full BioOn June 24, 2025, the Connecticut governor signed into law SB 1295, a bill amending the Connecticut Data Protection Act (CTDPA). The…
The U.S. Department of Justice recently adopted a new Rule on Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern…
The New York State Department of Financial Services recently announced that it has entered into a consent order with…
On December 27, 2024, the Department of Health and Human Services (“HHS”) proposed substantial revisions to the 20-year-old HIPAA Security Rule. Comments on the…
This is not a drill: the Texas Attorney General is coming for HIPAA. On September 4, 2024, the State of Texas sued…
The FTC recently sent five tax preparers a notice of its intention to pursue civil penalties…
To say there’s been a lot of new privacy law in the last decade is an understatement. For those of us who think we’ve “seen…
On May 20, 2022, with little fanfare and just five short paragraphs, the Federal Trade Commission announced that businesses must publicly report…
Executive teams in the U.S. live in fear of a successful ransomware attack, and who can blame them? Attacks are both prevalent…
In a unanimous decision we sincerely hope was not a cruel April Fool’s Day gag, yesterday the United States Supreme Court ruled in favor of…
On November 10, 2020, the European Data Protection Board (“EDPB”) issued highly anticipated guidance intended to clarify how data exporters could legally transfer data…
As we discussed last week, the Court of Justice of the European Union (“CJEU”) recently ruled that…
In a recent case that has set the data breach defense bar abuzz, a federal magistrate judge in Virginia overseeing a class action against…
The oft-derided U.S. hodgepodge of privacy and data security law is about to add another hodge. Or is it a podge? Not important, moving on……
It is unsurprising that big data breaches lead to big costs (we see you Facebook). You would be forgiven, then, for assuming…
British Airways appears poised to be the recipient of the largest GDPR fine to-date. The UK Information Commissioner’s Office today issued a…