Joseph J. LazzarottiBlog Posts

See all

  • From Time Keeping to Dashcams, BIPA Litigation Continues

    The use of smart dashcams and vehicle cameras, including those leveraging AI technology, may trigger the next wave of BIPA litigation, according to two cases filed in Illinois this week. Enacted in 2008, the Illinois Biometric Information Privacy Act, 740 ILCS 14 et seq. (the “BIPA”), went largely unnoticed until a few years ago when...
    January 10, 2022
  • Preventing “Credential Stuffing” Attacks, Guidance from NY State Attorney General Letitia James

    After reading New York Attorney General Letitia James’ Business Guide for Credential Stuffing Attacks (“Guide”), I promptly reminded my family (and myself!) to change passwords. The practice of using the same password for multiple online accounts is one that most, if not all of us, use from time to time. According to a recent study,...
    January 10, 2022
  • Does a Poor ESG, Social Responsibility Rating Increase an Organization’s Cyber Risk?

    With ransomware and other cyber threats top of mind for most in the c-suite these days, a question frequently raised is whether a particular organization is a target for hackers. Of course, nowadays, any organization is at risk of an attack, but the question is whether some organizations are targeted more than others. A recent...
    January 7, 2022
  • Does Your Cyber Insurance Policy Look More Like Health Insurance?

    Over the past several years, if your organization experienced a cyberattack, such as ransomware or a diversion of funds due to a business email compromise (BEC), and you had cyber insurance, you likely were very thankful. However, if you are renewing that policy (or in the cyber insurance market for the first time), you are...
    January 3, 2022
  • Responding to the Kronos Cyber Attack – What Should Employers Be Thinking About?

    The leaders of our Wage & Hour Practice, Justin Barnes Jeffrey Brecher and Eric Magnus collaborated with us on this article. According to reports, Kronos, the cloud-based, HR management service provider, suffered a data incident involving ransomware affecting its information systems. Kronos communicated that it discovered the incident late on Saturday, December 11, 2021, when...
    December 14, 2021
  • Employee Monitoring: New York Establishes New Requirements for Employers

    Earlier this month, New York Governor Kathy Hochul signed into a law a bill that will require New York private sector employers to provide written notice to employees before engaging in electronic monitoring of their activities in the workplace.  Civil Rights (CVR) Chapter 6, Article 5, Section 52-C*2 will take effect six months after enactment,...
    November 19, 2021
  • OSHA ETS: What Records Must Covered Employers Collect, Retain, Safeguard, and Make Available Upon Request

    Last week, the Occupational Safety and Health Administration (OSHA) issued an Emergency Temporary Standard (ETS) implementing President Joe Biden’s COVID-19 vaccine mandate covering employers with at least 100 employees. The ETS is summarized here, including the general compliance deadline of 30 days from November 5, 2021, with an additional 30 days for testing to begin,...
    November 8, 2021
  • DOJ Announces Cybersecurity Enforcement Initiative Targeting Federal Contractors

    Last week, the Department of Justice (“DOJ”) announced the launch of its Civil Cyber-Fraud Initiative (“the Initiative”) aimed at combating “new and emerging cyber threats to the security of sensitive information and critical systems” specifically targeting accountability of cybersecurity obligations for federal contractors and federal grant recipients, by way of the False Claims Act.  The...
    October 18, 2021
  • California Expands Privacy and Security Requirements for Genetic Data

    With health-related data and how to protect it at the forefront of discussion since the start of the COVID-19 pandemic, this week California Governor Gavin Newsom signed into law two bills related to genetic data.  First, AB 825, will expand the definition of personal information to include genetic data, for data breach notification requirements for businesses... Continue Reading
    October 9, 2021
  • California Expands Privacy and Security Requirements for Genetic Data

    With health-related data and how to protect it at the forefront of discussion since the start of the COVID-19 pandemic, this week California Governor Gavin Newsom signed into law two bills related to genetic data.  First, AB 825, will expand the definition of personal information to include genetic data, for data breach notification requirements for...
    October 8, 2021

Pages