Matt Van Itallie

Privacy alert! The recent FTC settlements highlight the need for businesses to prioritize consumer privacy and data protection. Privacy attorneys Angela Doughty, CIPP/US, AIGP, and Mayukh Sircar, CIPP/US, explain. https://buff.ly/3WBya11 #privacy #cybersecurity #security #technology #dataprotection #infosec #hacking #datasecurity #tech #hacker #informationsecurity #cybercrime #data #dataprivacy #cyber #cyberattack #cybersecurityawareness #privacyattorney #privacypros

1

Great article here from my colleague, John Wilson - HaystackID’s Chief Information Security Officer and President of Forensics. John dives into the implications of iOS 18’s new privacy features and AI features and how it impacts our work in eDiscovery, investigations, and #DFIR. This release introduces several significant privacy features that present new challenges for our work in eDiscovery and investigations. Key Challanges: 1. Locked and Hidden Apps: iOS 18 allows users to lock or hide apps, requiring advanced techniques to access app data, which complicates our data collection processes. This is a big one - custodian interviews prior to collection need to hammer on this. 2. Selective Contact Sharing: Users can now selectively share contacts with apps, potentially limiting the contact information we can access during investigations. 3. Passwords App: A dedicated Passwords app centralizes sensitive login information with enhanced security, presenting extraction challenges. 4. Private Cloud Compute: Extends privacy protections to the cloud, making it harder to gather comprehensive evidence stored there. 5. On-Device Processing: Many AI models now run on the device, reducing data transmission to the cloud, requiring more direct device access. 6. ChatGPT Integration: Built-in privacy protections obscure user interactions, necessitating innovative approaches to data recovery. 7. Satellite Message Encryption: End-to-end encryption of satellite messages enhances security, making it vital to access the involved devices directly. Strategies for eDiscovery & Investigation Teams: - Adapt Quickly: Embrace flexibility and continuously update methods to handle the evolving privacy landscape. - Leverage Expertise: Utilize specialized knowledge within your team to develop tailored solutions for accessing and analyzing encrypted data. - Enhance Collaboration: Foster strong partnerships with legal teams to ensure ethical and legal compliance while navigating privacy enhancements. -Invest in Technology: Stay ahead of the curve by investing in cutting-edge forensic tools and software capable of addressing new challenges. - Focus on Education: Provide ongoing training for your team to keep skills sharp and informed about the latest privacy and security developments. Last but not least, don’t forget to reach out to us here at HaystackID - our Mobile Device Forensics capability (via our MEDAL suite of services) is the best in the business. 😄 #iOS18 #eDiscovery #Investigations #Privacy #CyberSecurity #HaystackID #cyberincidentresponse #digitalforensics 🔗 Read John Wilson's full article at the link below:

24

This story in yesterday’s Boston Globe shows how this dramatic case highlights the necessity for legal professionals to understand digital forensics and how it can make or break your case. How do you educate yourself in this area? https://lnkd.in/eyegszpH

5

1 Comment

Pennsylvania’s Consumer Data Privacy Act is Now Law! As of March 18, 2024, Pennsylvania has officially passed the Consumer Data Privacy Act (House Bill No. 1201, Session of 2023). This landmark legislation enhances consumers' data privacy rights and sets forth clear obligations for data controllers and processors. Key Highlights Consumer Rights: Consumers now have enhanced rights, including the ability to access, correct, and delete their personal data. They can also opt out of data processing for targeted advertising or sales. Business Responsibilities: Data controllers must limit data collection, obtain consent for processing sensitive data, and implement robust data protection measures. Enforcement and Penalties: Strict penalties are in place for non-compliance, emphasizing the importance of businesses aligning with these new standards Is your business fully compliant with these regulations? Privacy24 is here to help! Our seasoned compliance experts specialize in helping businesses navigate complex data privacy laws. Our expert team can ensure that your company not only complies with this new law but also leverages compliance as a competitive advantage. Our Services Include: Comprehensive compliance audits. Tailored policy development and strategic implementation. Training and ongoing support to maintain high compliance standards. Don’t risk penalties or damage to your reputation. Contact us today for a consultation and let Privacy24 help you achieve and maintain compliance with confidence. 🌐 For more information, visit privacy24.io or send us a direct message here on LinkedIn! #DataPrivacy #ConsumerProtection #PennsylvaniaLaw #ComplianceExperts #Privacy24

6

Should hyperlinks in email be treated as "modern attachments"? It's the eDiscovery debate of the moment. Level Legal Vice President of Digital Forensics David A. Greetham, CEDS, CIGO, CFE helps you make up your mind. 👇 https://lnkd.in/gTqerdvQ #eDiscovery #Hyperlinks #LegalInnovation

2

The California Privacy Protection Agency (CPPA) recently voted to advance new regulations on cybersecurity audits, risk assessments, and automated decision-making technology. Our lawyers recap the meeting in this blog post. https://bit.ly/49cDRqj Authors: Janis Kestenbaum, James Snell, and Peter Hegel (CIPP/US) #Privacy #PrivacyLaw #Cybersecurity #CPPA

5

Stay informed with Array's weekly eDiscovery roundup! Here's a recap of the latest insights: Rule 502(d) is a good way to protect yourself in case of inadvertent disclosure — but you might be able to make it even more useful. And parties should consider how to use and preserve Internet of Things data. Stay tuned for more updates on eDiscovery trends and best practices from Array. #eDiscovery #LegalTech #LitigationSupport #TrustArray https://lnkd.in/gu3WbeVZ

14

INTERNET, IT & E-DISCOVERY BLOG: Anyone surprised that AI is transforming Audit, Risk, and Compliance?   https://lnkd.in/gJuenMfz https://lnkd.in/g4wQY33N   SCMagazine.com reported that ““AI and automation are two of the most powerful tools helping audit, risk and compliance teams close the risk resiliency gap,…and the AuditBoard believe that if cyber has reshaped the enterprise risk assessments and management world, AI is about to push ESG frameworks into overdrive.” The September 27, 2024 entitled “4 ways AI is transforming audit, risk and compliance” (https://lnkd.in/gTMeJDJc) included these comments from Rich Marcus at Audit &Beyond 2024 conference:   AI and automation are reshaping audit, risk, and compliance workflows, especially in cybersecurity, by boosting efficiency and accuracy. These tools help bridge the gap between fast-evolving threats, regulatory demands, and limited resources. AI enables real-time risk sharing, automates the culling of evidentiary data, and streamlines framework stress testing, allowing teams to conduct more frequent assessments with a more accurate analysis.   This process not only sharpens cybersecurity defenses, but makes it easier for companies to juggle new regulations like the SEC’s cybersecurity disclosure rules.   Marcus suggested the whole of these complimentary technologies is greater than the sum of its parts. By automating labor-intensive tasks like evidence collection, control testing, and risk reporting it allows for real-time risk management.   This transformation frees up compliance teams to focus on strategic decision-making and responding proactively to evolving threats, he said.   What do you think?   https://lnkd.in/gJuenMfz https://lnkd.in/g4wQY33N #ai

2

The new Semperis Ransomware Risk Report is out. Link to the full report is in the comments. #cyberinsurance

38

3 Comments

Concord Blog: How The U.S. Can Take A Cue From The E.U. In Addressing Data Privacy Concerns & Risks Associated With AI. https://vist.ly/3mg5nfg #Privacy #DataPrivacy #GDPR #CCPA #CPRA #PrivacyFirst #PrivacyMatters

5

TOMORROW: Avalon and Relativity present: "A Breath of Fresh aiR: A Conversation about the Power of AI in eDiscovery." There's still time to secure your spot to hear industry leaders Martin Mayne, CEDS, Solutions Architect at Avalon, and Chris Haley, VP, Practice Empowerment aiR at Relativity, discuss Relativity aiR and the strategies that will help your firm save time and money – while gaining crucial insights and defensible results. Register now: https://hubs.li/Q02ZYTyf0

9

The Oregon Consumer Privacy Act (OCPA) was signed into law on July 18, 2023, and is set to take effect on July 1, 2024, aligning with the new Texas privacy law. However, for non-profit organizations, compliance is required starting July 1, 2025. https://lnkd.in/eNyybXu9 Is your organization prepared for these changes? Stay ahead of the curve with our comprehensive guides! Request your copy Clarip's Oregon Consumer Privacy Act white paper today to ensure you're ready for compliance. 📄 Get your copy now: https://lnkd.in/eNygKN8x #OCPA #PrivacyLaw #DataGovernance #DataRights #Compliance #OregonLaw #NonProfit #Clarip

11

As technology continues to evolve, so does the field of digital forensics. Lucy Robinson just posted a great short article, "From Paper Chase to Pixel Perfect: How eDiscovery Software Evolved and Ushered in a New Era of eDiscovery." Read the full article here: https://hubs.li/Q02H6W1p0 Like eDiscovery, digital forensics must keep pace with changes in digital devices, cloud computing, remote collections, AI, and more. Mobile phones, now central to communication, banking, shopping, and even health tracking, are a treasure trove of data. Ensuring defensible collection and preservation is paramount in any forensic investigation or eDiscovery matter. Discover how Veracity Forensics can help you navigate this complex landscape with ease. Let's connect and explore how we can support your forensic and eDiscovery needs! #MobileForensics #DigitalForensics #eDiscovery #LegalTech

3

For more than four years now, the privacy industry has been working to ensure compliance with the California Consumer Privacy Act (CCPA) as it continues to evolve with new guidelines and standards. Soon after #CCPA went into effect, amendments were introduced per the California Privacy Rights Act (CPRA), furthering residents enhanced authority over their information. Staying abreast of changes and knowing how to interpret guidelines is a critical task, prompting innovators like Secuvy to develop solutions that support the industry and grow with its needs. Here, our team has put together a helpful eBook that outlines the most essential elements of CCPA and #CPRA and what best practices are needed to stay ahead. DOWNLOAD HERE: https://hubs.li/Q02LslPG0 #dataprivacy #datacompliance

4

For better security when using AI in eDiscovery, cloud-based large language models and AI governance practices are critical for your program. AI expert Karl Sobylak explains what you need to know. https://hubs.li/Q02TL8yD0 #AI #eDiscovery

8

Minnesota's state privacy legislation has been sent to Governor Tim Walz's desk to be signed into law. The Minnesota Consumer Data Privacy Act, once enacted, will add to the growing list of state privacy laws in the US. This year alone, five state laws have been enacted, bringing the total to 18.   Use our US State Privacy Law tracker as a reliable and easy resource while planning your compliance strategies. https://lnkd.in/dFHU2yhk #Privacy #DataPrivacy #PrivacyRisk #Compliance #InformationGovernance #InfoGov #InfoSec #LegalTech #PrivacyRegulation #DataProtection #RecordsManagement #PrivacyTech #Automation #PrivacyByDesign #ThirdPartyRisk #ThirdPartyRiskManagement #RiskManagement #MODPA #NJDPA #CCPA #CPRA #VCDPA #CPA #CTDPA #UCPA #TDPSA #OCPA #FDBR #MCDPA #DPDPA #ICDPA #SB255 #NDPA #NJDPA #TIPA #KCDPA #INCDPA #GDPR 

2

Because there’s no comprehensive federal privacy law, businesses must grapple with a diverse and often confusing landscape of state privacy laws, each of which differs in key respects. Fisher Phillips’ U.S. Privacy Hub surveys current state privacy laws, highlights important similarities and differences, and explores their implications. This resource will help businesses navigate the increasingly complex environment, aid in compliance efforts, and anticipate future developments in this rapidly evolving area of law. Check out our resources and get in touch with a member of our team. We’re ready to help you with all your U.S. privacy issues: https://bit.ly/4fdCwRI. #privacylaw #dataprotection #workplacelaw

20