: Recognize Data Privacy Day by protecting your small business from cybercriminals chundycz January 28, 2026 | 8:02AM Recognize Data Privacy Day by protecting your small business from cybercriminals Your small business likely has had many milestones. Hiring your first employee. Opening your doors for the first time. Making your first sale. But some milestones you’d probably rather avoid — like experiencing your first cyberattack. Think you’re too small to target? Think again. Cybercriminals target companies big and small, so this Data Privacy Day keep your business’s data (and your customers’ data) safe by reviewing the FTC’s updated resources at ftc.gov/cybersecurity . At ftc.gov/cybersecurity , you’ll find the FTC’s updated article, Cybersecurity for Small Business, included in the FTC’s suite of small business materials at ftc.gov/smallbusiness . This covers eight topics ranging from the importance of using email authentication technology and how to protect your business from phishing and ransomware, to q[...]
: Key Drivers Behind the Rising Demand for Virtual CISOs Wednesday, April 22,2026 Businesses are navigating the challenges of a digital-first environment, which is driving an increased demand for expert-driven cybersecurity solutions. The virtual chief information security officer (vCISO) has become essential for organizations seeking to enhance their cybersecurity resilience while managing costs effectively. Effective security leadership is more crucial than ever, particularly in light of the evolving threat landscape, which includes ransomware attacks and data breaches. Addressing Cybersecurity Challenges Organizations face a significant escalation in cyberattacks as hackers continually evolve their tactics. This dynamic landscape makes it challenging for businesses to maintain effective defenses. A vCISO plays a pivotal role by providing specialized guidance in threat intelligence, risk management, and incident response. By working with a vCISO, companies can proactively identify vulnerabilities and impleme[...]
: Brussels, 18 February - The European Data Protection Board (EDPB) has adopted a report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) . The Board selected this topic as it is one of the most frequently exercised GDPR rights and one about which DPAs frequently receive complaints from individuals. The main objectives of this coordinated action are to ensure that the right to erasure is effectively exercised by individuals in Europe and understand how controllers comply with this right in practice. In addition, the EDPB identified good practices and the most important related challenges, with the aim of providing further guidance on this topic. Throughout 2025, 32 DPAs across Europe took part in this initiative. More specifically, 9 DPAs have initiated new formal investigations or have continued ongoing ones, and 23 DPAs carried out a fact-finding exercise. A total of 764 controllers across Europe responded to the action, ranging from small and medium-sized[...]
: The Federal Trade Commission announced today that is considering whether to update its Rule on Impersonation of Government and Businesses or take other action to prevent online platforms from engaging in ad-optimization practices that may be furthering impersonation scams. In an Advance Notice of Proposed Rulemaking (ANPRM) to be published in the Federal Register , the FTC is seeking comment on the extent to which ad-optimization tools and services offered by social media, search engines and other digital marketplace platforms further efforts by scammers to impersonate legitimate businesses and government agencies using online ads. “Free markets depend on trust, transparency and consumers’ ability to make informed choices. Impersonation scams—especially when amplified by digital platforms that profit from them—do more than rob Americans of their hard-earned money,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “They erode the very foundation that allows competitive markets[...]
: Background information Date of final decision: 15 May 2025 National case Controller: SOLOCAL MARKETING SERVICES Legal Reference(s): Article 7 (Conditions for consent), Article 6 (Lawfulness of processing) Decision: administrative fine and an order to cease electronic commercial prospecting in the absence of valid consent, together with a penalty of 10 000 € per day overdue after a period of 9 months Key words: administrative fine, consent, unsolicited communication Summary of the Decision Origin of the case As the French Supervisory Authority (SA) made commercial prospecting a priority topic for investigations in 2022, it focused on the practices of professionals in the sector, particularly those who resell data, including the many intermediaries in this ecosystem known as data brokers. The French SA carried out investigations on SOLOCAL MARKETING SERVICES which got prospect data mainly from data brokers, publishers of game contests and product testing sites (these actors are the first links in the cha[...]
: Background information Date of final decision: 15 May 2025 National case Controller: SOLOCAL MARKETING SERVICES Legal Reference(s): Article 7 (Conditions for consent), Article 6 (Lawfulness of processing) Decision: administrative fine and an order to cease electronic commercial prospecting in the absence of valid consent, together with a penalty of €10 000 per day overdue after a period of 9 months Key words: administrative fine, consent, unsolicited communication Summary of the Decision Origin of the case As the French Supervisory Authority (SA) made commercial prospecting a priority topic for investigations in 2022, it focused on the practices of professionals in the sector, particularly those who resell data, including the many intermediaries in this ecosystem known as data brokers. The French SA carried out investigations on SOLOCAL MARKETING SERVICES which got prospect data mainly from data brokers, publishers of game contests and product testing sites (these actors are the first links in the chai[...]
: The Federal Trade Commission is taking action against Illusory Systems Inc. for failing to implement adequate data security measures, leading to a major security breach in which hackers stole $186 million from consumers. Under a proposed order settling the FTC’s allegations, Utah-based Illusory, which does business as Nomad, will be required to implement an information security program to address numerous alleged security failures and to return recovered money to affected consumers. “The FTC Act requires companies to take reasonable security measures,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “It’s important that companies live up to their security promises to consumers.” In its complaint , the FTC alleged that Nomad prominently touted its security in its advertising, claiming that it offered “security-first” services. The FTC, however, alleged that the company failed to live up to these promises by failing to: use secure coding practices; implement processes for recei[...]
: The Federal Trade Commission issued a policy statement today announcing that the Commission will not bring an enforcement action under the Children’s Online Privacy Protection Rule (COPPA Rule) against certain website and online service operators that collect, use, and disclose personal information for the sole purpose of determining a user’s age via age verification technologies. The COPPA Rule requires operators of commercial websites or online services directed to children under 13, and operators with actual knowledge they are collecting personal information from a child, to provide notice of their informationpractices to parents and to obtain verifiable parental consent before collecting, using, or disclosing personal information collected from a child under 13. Age verification technologies play a critical role in helping parents as they monitor their children’s online activities. Since COPPA was enacted in 1998, there’s been an explosion in the use of internet-connected technologies by children. To he[...]
: CALL member Dominique Garingan , Library Manager in the Calgary office of Parlee McLaws LLP, recently wrote an article on " The Singular They: Gender Inclusivity in Canadian Legal Writing and Style Guides " . It originally appeared on the website Notes Between Us on June 22, 2022 . It is reprinted here with permission. Language is a product of culture, and it is known that the English language lacks a singular pronoun that signifies the non-specific he or she . Although at times unintentional, this singularity versus plurality of pronouns, coupled with gendered indicators, has helped entrench the binary perceptions of gender found in writing which we are now seeking to change. The Department of Justice of Canada recently provided a series of guidelines on the use of gender-neutral language in a legislative context. These guidelines include as a recommendation the use of the singular they and its other grammatical forms ( them , themselves , and their ) to refer to indefinite pronouns and s[...]
: Buckle up for a two-lane look at car buying lfair July 30, 2020 | 1:04PM Buckle up for a two-lane look at car buying By Lesley Fair It’s one of the biggest purchases people make, but two new FTC staff reports examine some common pitfalls when consumers are in the market for a car. Buckle down and read the Bureau of Consumer Protection’s Buckle Up: Navigating Auto Sales and Financing , which focuses on the challenges buyers face in getting accurate, understandable information when shopping for a vehicle. Not in the auto business? Not so fast. The deep-dive analysis of Buckle Up and an accompanying report by BCP staff and the Bureau of Economics – The Auto Buyer Study: Lessons From In-Depth Consumer Interviews And Related Research – offer insights into the perception and behavior of consumers in the study that can apply to other industries. The FTC’s interest in auto-related transactions goes back decades. (Check out Volume 1 of Federal Trade Commission Decisions for a 1919 case regarding deception in the s[...]