-

Hackers Extort Victim with SEC Whistleblower Complaint
In an unintended consequence of the Securities and Exchange Commission’s (SEC) unprecedented rulemaking agenda, a black-hat hacker gang has filed a whistleblower complaint against its victim for not reporting a cybersecurity incident “as mandated” by a Rule reporting requirement that isn’t even required yet….By: Burr & Forman
-

Updated Advanced Computing and Semiconductor Manufacturing Export Controls Take Effect
On October 17, 2023, the Commerce Department’s Bureau of Industry and Security (“BIS”) released two interim final rules (“IFRs”) that amended the Export Administration Regulations (“EAR”) to significantly expand export controls on advanced computing and semiconductor manufacturing items originally established under an October 7, 2022, IFR. Aside from a Temporary General License (“TGL”) effective October…
-

How President Biden’s Executive Order on Artificial Intelligence May Set a New Compliance Bar Across Industries
The legal significance of President Joe Biden’s “Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence” is immense, marking a pivotal moment in the governance of AI technologies in the United States, as it establishes an initial framework for regulating and governing the development and deployment of AI tools….By: Parker…
-

Genentech, Roche, and Biogen Sue Dr. Reddy’s and Fresenius for a Proposed Biosimilar of Rituxan in District of New Jersey
Genentech, Roche, and Biogen filed a Complaint on November 17 against Dr. Reddy’s Laboratories (“DRL”) and Fresenius in the U.S. District Court for the District of New Jersey, alleging infringement of 15 patents under the BPCIA based on DRL’s submission of an aBLA for DRL_RI, a proposed biosimilar of RITUXAN (rituximab) and DRL’s provision of Notice…
-

Florida and Connecticut Expand Breach Laws to Include Geolocation Data as Personal Information
Consistent with recent trends in broadening the scope of state data breach notification statutes, Connecticut and Florida have expanded the definitions of personal information under their respective data breach notification statutes to include geolocation data. This change became effective in Connecticut as of Oct. 1 and will become effective in Florida on July 1, 2024….By:…
-

Patients Claim Columbia University’s Policies Permitted OB-GYN Dr. Hadden to Sexually Abuse Patients for Two Decades
Recently, patients who visited Columbia University’s OB-GYN department have reported the sexual abuse committed against them by Dr. Robert Hadden. Dr. Hadden was a long-time fixture at Columbia University, having spent his entire medical career there. However, over the more than 20 years Dr. Hadden was practicing, he is alleged to have sexually assaulted 245…
-

Blue Shield of California Confirms MOVEit Data Breach at MESVision Compromised Consumers’ Confidential Information
On November 17, 2023, California Physicians’ Service dba Blue Shield of California (“Blue California”) filed a notice of data breach with the Attorney General of Montana. In this notice, Blue California explains that one of the company’s vendors, Medical Eye Services, Inc. (“MESVision”), experienced a MOVEit-related data breach resulting in an unauthorized party being able…
-

A Nightclub Does Not Have a Duty to Defend and Indemnify an Intoxicated Minor in an Automobile Accident Case
Garcia v. Myrtil, 48 Fla. L. Weekly D1483 (Fla. 3d DCA, Aug. 2, 2023) – The plaintiff brought suit against the intoxicated minor (the tortfeasor) and the subject nightclub that served him pursuant to Florida’s Dram Shop Law, Section 768.125….By: Marshall Dennehey
-

The University of Michigan Data Breach Impacts Over 63k Students, Applicants, Employees and Research Study Participants
On October 23, 2023, the University of Michigan (“U of M”) filed a notice of data breach with the U.S. Department of Health and Human Services Office for Civil Rights after discovering there was unauthorized access to confidential information in U of M’s possession. In this notice, U of M explains that the incident resulted…
-

Enstar US Announces Provides Notice of MOVEit Data Breach to Over 64k Individuals
On November 20, 2023, Enstar Inc. filed a notice of data breach with the Attorney General of Maine after discovering that a vulnerability in MOVEit, a file-transfer program used by Enstar, contained a critical vulnerability. In this notice, Enstar explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information,…