Photo of Kevin Boyle

Kevin Boyle advises clients on security and privacy issues arising in connection with a broad array of transactions as well as in responding to security incidents and dealing with promotion and marketing issues. Working with enterprises large, small and in between, he guides clients in developing practical solutions to privacy and security compliance issues that reduce both risk and cost. Kevin’s approach is guided by his role as chair of Latham’s global security and privacy compliance program where he “enjoys” a client’s perspective of many of the issues that face privacy and security professionals. With the firm since 1987, Kevin has nearly 15 years of experience in dealing with privacy and security issues.

iStock_Lock.jpgThe Ponemon Institute is out with a new Intel-sponsored study concluding, among other things, that lost laptops cost U.S. organizations in excess of $2 billion a year. Yet, two-thirds of companies surveyed still do not take basic security precautions to protect laptops. A look at prior Ponemon work cited in the report suggests failing to do so likely costs more—almost $50,000 for each lost laptop. Whether you are defending an existing mobile security program or seeking budget support to implement

We are often asked to review web site terms of use.  Here are five provisions that often seem to be missing in action (in no particular order):

 

No Scraping

 

iStock_000005643842XSmall.jpgWith automated screen scraping tools readily available, this data harvesting technique presents issues for websites that allow users to search for data.  Even if you aren’t troubled that others may obtain mass access to the data, you may want to prohibit such activity simply to avoid the performance

Illinois recently enacted the Employee Credit Privacy Act (“ECPA” or the “Act”), which prohibits employers from recruiting and hiring applicants based on such individuals’ credit histories or credit reports. The Act, which was adopted on August 11, 2010 and will take effect on January 1, 2011, generally prohibits employers from inquiring about an applicant’s or employee’s credit history or ordering or obtaining an applicant’s or employee’s credit report from a consumer reporting agency. The Act also prohibits an employer from