FTC Amends Safeguards Rule to Add a Breach Notification Requirement

The Federal Trade Commission (FTC) has approved an amendment to the Safeguards Rule that would require nonbanking financial institutions to report a breach of unencrypted customer information involving at least 500 customers. The notice must be provided as soon as possible, and no later than 30 days after discovery. The new requirement becomes effective 180 days after publication of the rule in the Federal Register.

Read the full Alert on the Duane Morris LLP website.

Webinar Replay: Legal Developments in U.S. Consumer Data Protection Regulations

A video replay of the webinar “The Data Privacy and Security Landscape: Legal Developments in U.S. Consumer Data Protection Regulations” is available to view.

Vietnam: New Decree on Personal Data Protection

On 17 April 2023, Decree No. 13/2023/ND-CP on personal data protection (PDPD) was officially issued by the Vietnamese Government. The long-awaited and controversial decree is set to be the first ever legal document with comprehensive regulations on both personal data and its protection in Vietnam. With an exception being the grace period of 2 years for SMEs, after 1 July 2023, the PDPD will be applicable to all entities located in Vietnam and/or outside Vietnam but directly con-ducting activities in relation to the processing of personal data in Vietnam.

To read the full text of this blog post by Duane Morris Vietnam partner Dr. Oliver Massmann, please visit the Duane Morris Vietnam Blog.

© 2009-2025 Duane Morris LLP. Duane Morris is a registered service mark of Duane Morris LLP.

The opinions expressed on this blog are those of the author and are not to be construed as legal advice.

Proudly powered by WordPress