New York employee electronic monitoring law takes effect
7 May 2022
New York employers that monitor employee phone, email or internet use must now give prior written notice and obtain acknowledgement.
Insights for North, Central, and South America, and the Caribbean.
New York employers that monitor employee phone, email or internet use must now give prior written notice and obtain acknowledgement.
US banks must now notify their regulator within 36 hours of a significant computer-security incident, and service providers must notify their bank customers.
Okta confirmed that Lapsus$ had accessed a support contractor’s computer, potentially affecting hundreds of its customers.
CIRCIA will require US critical infrastructure entities to report significant cyber incidents to CISA within 72 hours and ransom payments within 24 hours.
Cloud services used by Texas state agencies must now hold TX-RAMP certification under Texas law.
New York City now requires businesses collecting customers’ biometric data to post clear notices and bans selling that data.
The BVI’s Data Protection Act 2021 comes into force, introducing modern data protection principles.
REvil exploits Kaseya’s VSA remote management software, hitting managed service providers and up to 1,500 downstream businesses.
Police reveal Operation Trojan Shield, in which criminals used the FBI-controlled Anom phone app, leading to over 800 arrests.
The US Supreme Court has narrowed the CFAA’s “exceeds authorized access” limb, limiting criminal liability for misusing legitimately accessible data.
Following the Colonial Pipeline attack, US pipeline owners must now report cyber incidents to CISA and appoint a cybersecurity coordinator.
A DarkSide ransomware attack forces Colonial Pipeline to halt the largest fuel pipeline on the US East Coast, causing shortages.