: Recognize Data Privacy Day by protecting your small business from cybercriminals chundycz January 28, 2026 | 8:02AM Recognize Data Privacy Day by protecting your small business from cybercriminals Your small business likely has had many milestones. Hiring your first employee. Opening your doors for the first time. Making your first sale. But some milestones you’d probably rather avoid — like experiencing your first cyberattack. Think you’re too small to target? Think again. Cybercriminals target companies big and small, so this Data Privacy Day keep your business’s data (and your customers’ data) safe by reviewing the FTC’s updated resources at ftc.gov/cybersecurity . At ftc.gov/cybersecurity , you’ll find the FTC’s updated article, Cybersecurity for Small Business, included in the FTC’s suite of small business materials at ftc.gov/smallbusiness . This covers eight topics ranging from the importance of using email authentication technology and how to protect your business from phishing and ransomware, to q[...]
: Practice Fusion case suggests 6 health privacy pointers lfair June 8, 2016 | 9:01AM Practice Fusion case suggests 6 health privacy pointers By Lesley Fair Combine two of the most talked-about consumer protection topics – health privacy and consumer-generated online content – and what do you get? A proposed FTC settlement with Practice Fusion, the largest cloud-based electronic health records company in the country, and six compliance tips for others in the industry. One of San Francisco-based Practice Fusion’s primary products is an electronic records system for outpatient providers. In 2009, the company launched “Patient Fusion,” an online portal where patients whose providers were already using Practice Fusion could view or download their health information or transmit it to another provider. Patient Fusion also let patients send and receive secure messages from their providers. Fast forward several years and the company decided to expand Patient Fusion to include a public directory where current and prosp[...]
: Brussels, 18 February - The European Data Protection Board (EDPB) has adopted a report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) . The Board selected this topic as it is one of the most frequently exercised GDPR rights and one about which DPAs frequently receive complaints from individuals. The main objectives of this coordinated action are to ensure that the right to erasure is effectively exercised by individuals in Europe and understand how controllers comply with this right in practice. In addition, the EDPB identified good practices and the most important related challenges, with the aim of providing further guidance on this topic. Throughout 2025, 32 DPAs across Europe took part in this initiative. More specifically, 9 DPAs have initiated new formal investigations or have continued ongoing ones, and 23 DPAs carried out a fact-finding exercise. A total of 764 controllers across Europe responded to the action, ranging from small and medium-sized[...]