Blog

Security, Privacy and the Law

Security and privacy issues encountered by businesses often require immediate and discreet solutions. We cover topics that arise from guiding our clients through the process of complying with the ever-growing number of state, federal and international laws governing information security, identity theft, surveillance and other privacy issues.

Security, Privacy and the Law
China Adopts New Data Security Law
Blog August 03, 2021
On June 10, 2021, China adopted a new Data Security Law that will impact every business operating in or doing business with China. The law, which will take effect in less than a month (September 1, 2021), is sweeping in scope, imposes extensive data processing obligations, and establishes potentially severe penalties for violations. Although many of the details surrounding implementation remain unclear, given the law's extensive requirements and severe penalties for noncompliance…
Department of Homeland Security Releases Homeland Threat Assessment
Blog October 22, 2020
On October 6, 2020, the Department of Homeland Security (“DHS”) released a 2020 Homeland Threat Assessment (“HTA”).  According to Acting Secretary Chad F. Wolf, the “first of its kind report” identifies the primary threats facing the nation and analyzes the vast array of information coming from all DHS operational components that crosses his desk on a daily basis.  “When the American people read this HTA they will be more aware of the traditional threats facing the Homeland like terrorism……
Chinese Regulation of Children's Personal Data Goes into Effect
Blog October 02, 2019
On October 1, 2019, China's new regulation to protect personal data related to children – called the “Measures on Online Protection of Children's Personal Data” – went into effect. As we wrote in June, when a draft of the regulation was released by the Cyberspace Administration of China, the regulation contains elements similar to those found in both the United States' Children's Online Privacy Protection Act (“COPPA”) and the European Union's General Data Protection Regulation (“GDPR”)…
China Expands Its Cybersecurity Regulations
Blog October 09, 2018
As noted recently in the Wall Street Journal, New cybersecurity rules will give Chinese authorities sweeping powers to inspect companies' information technology and access proprietary information—steps that are likely to deepen concerns among foreign businesses about their China operations.  These regulations were issued pursuant to the Cybersecurity Law of the People's Republic of China, which came into force on June 1, 2017…
An Explainer on the Latest (Reported) Chinese Theft of U.S. Defense Information
Blog June 12, 2018
The Washington Post recently reported that the Chinese Ministry of State Security stole a trove of sensitive defense information from a U.S. Navy contractor working for the Naval Undersea Warfare Center.  According to the Post, the information included plans to develop a supersonic anti-ship missile for U.S. submarines, along with “signals and sensor data, submarine radio room information relating to cryptographic systems, and Navy submarine development unit's electronic warfare……
Trump Meets Xi: Will They Talk Cybersecurity?
Blog April 01, 2017
President Trump has repeatedly claimed that his predecessor was weak on China. But at least with respect to cybersecurity, the facts don't support that charge. In 2015, “following all-night negotiations,” Robert Silvers writes, the United States convinced China to sign on to a joint commitment against “cyber enabled theft of intellectual property.” Ever since, China's hacking of U.S. companies has dropped off dramatically. Next month…

ABOUT

The Foley Hoag Security, Privacy and the Law Blog focuses on the security and privacy issues encountered by businesses that often require immediate and discreet solutions. Here we cover topics that arise from guiding our clients through the process of complying with the ever-growing number of state, federal and international laws governing information security, identity theft, surveillance and other privacy issues.

Our lawyers assist clients with questions on how to legally and ethically investigate abusive e-mail, take down infringing Web sites, maintain surveillance of company facilities and information systems, and remediate breaches of security. We work with clients to ensure the legality and success of existing security policies and protocols and help them develop new programs when necessary. Our lawyers have managed unexpected crises ranging from surprise inspections by government investigators to obtaining emergency court orders needed to secure stolen company computers from rogue insiders.

Blog Authors