Data Security Law Blog
Categories & Search

Resource Library

General Interest

Krebs on Security
International Association of Privacy Professionals
Google Online Security Blog

Legal Ethics

NYSBA Ethics Opinion 1019: Confidentiality; Remote Access to Firm’s Electronic Files
NYSBA Ethics Opinion 842: Using an outside online storage provider to store client confidential information
Arizona Ethics Opinion 05-04: Electronic Storage; Confidentiality
ABA Model Rule 1.6(c): Confidentiality of Information
ABA Formal Opinion 11-459: Duty to Protect the Confidentiality of E-mail Communications with One’s Client
ABA Cybersecurity Legal Task Force

Regulatory Guidance & Resources

HIPAA Administrative Simplification Regulation Text
HIPAA Privacy Rule Summary
FTC Report: Protecting Consumer Privacy in an Era of Rapid Change
FTC Guide for Business: Start with Security
FTC Guide for Business: Protecting Personal Information
FTC Guide for Business: Fighting Identity Theft with the Red Flags Rule
FTC Guidance: Buying or selling debts? Steps for keeping data secure
FTC Tips and Advice: Data Security
FTC 2014 Privacy and Data Security Update
FTC 2013 Privacy and Data Security Update
SEC Guidance for Investment Companies and Investment Advisors
NIST (National Institute of Standards and Technology) Cybersecurity Framework
DOJ Guidance: Best Practices for Victim Response and Reporting of Cyber Incidents

Statutes & Regulations

Interagency Guidelines Establishing Standards for Safeguarding Customer Information

Agencies: Office of the Comptroller of the Currency, Treasury (OCC); Board of Governors of the Federal Reserve System (Board); Federal Deposit Insurance Corporation (FDIC); Office of Thrift Supervision, Treasury (OTS)

CFPB Regulation V

Fair Credit Reporting

CFPB Regulation P

Privacy of Consumer Financial Information

SEC: 17 C.F.R. Part 248

Privacy of Consumer Financial Information and Safeguarding Personal Information

Gramm-Leach-Bliley Act

Financial Services Modernization Act of 1999

National Conference of State Legislatures’ 2015 Security Breach Legislation
National Conference of State Legislatures’ Security Breach Notification Laws