The U.S. Federal Trade Commission's "first-of-its-kind" enforcement action against U.S. health care company GoodRx has important takeaways for privacy programs that handle health-related data. It also signals an increase in the FTC's use of its unfairness authority in privacy cases, IAPP Managing Di...

In what the U.S. Federal Trade Commission calls a "first-of-its-kind" enforcement action, the FTC filed a proposed order against GoodRx, a U.S. health care company, for violating the Health Breach Notification Rule and the FTC Act. The proposed order prohibits GoodRx from disclosing user health data...

In this week’s Global News Roundup, the European Commission launched a new General Data Protection Regulation enforcement review plan. The U.S. Department of Health and Human Services’ Office for Civil Rights entered a settlement with a health care provider for a patient privacy rights violation. An...

In Emoi Services LLC v. Owners Insurance Company, the Ohio Supreme Court recently found software is an intangible item that cannot experience direct physical loss or damage and, therefore, the plaintiff’s inability to access or use its software during a ransomware attack was outside the scope of its...

Indian government officials are open to allowing countries and companies "diplomatic immunity" from the proposed Digital Data Protection Bill, The Economic Times reports. Proposed "data embassies" would provide a shield from local regulation and promote "corridors of trust," according to Indian Mini...