TOP NEWS | Colorado Enforces Universal Opt-Out Mechanism Under Privacy Law; Schubert Jonckheer & Kolbe LLP probes Slim CD breach affecting 1.7 million consumers and more.

Colorado Enforces Universal Opt-Out Mechanism Under Privacy Law

As of July 1, 2024, Colorado requires businesses under the Colorado Privacy Act to comply with universal opt-out mechanisms (UOOM), enabling consumers to opt out of data collection. The Global Privacy Control (GPC) is the state's approved method for stopping web-tracking, with other states like California and Connecticut adopting similar regulations. The Colorado Attorney General’s office will monitor compliance to prevent misuse of consumer data. Businesses face challenges adapting to various state privacy laws while using third-party tools to handle GPC signals. Read more

Global Embrace of Red Teaming for AI Risk Management

Governments and regulatory bodies worldwide are adopting red teaming to test large language models (LLMs) for potential vulnerabilities. Red teaming, originally used in cybersecurity, involves adversarial testing of AI systems to expose flaws, such as generating harmful or illegal content. Regulators like the G7, the U.S. White House, and the EU are mandating or encouraging these practices. In the U.S., the National Institute of Standards and Technology (NIST) is creating guidelines for AI red teaming. Similar regulatory actions are being considered in the EU, China, and the U.K. Read more

Schubert Jonckheer & Kolbe LLP probes Slim CD breach affecting 1.7 million consumers.

Schubert Jonckheer & Kolbe LLP is investigating a data breach that compromised the personal and credit card information of 1.7 million consumers processed by Slim CD, Inc. The breach occurred between August 17, 2023, and June 15, 2024, allowing unauthorized access to consumer credit card details. Information exposed includes names, addresses, card numbers, and expiration dates. Consumers affected may be at risk of identity theft or financial fraud and may be entitled to legal remedies. For more information, visit Schubert Jonckheer & Kolbe’s website. Read more

Data Breach Exposes Personal Information of Nearly 1 Million Medicare Beneficiaries

The Centers for Medicare & Medicaid Services (CMS) is notifying 946,801 Medicare beneficiaries of a data breach involving a vulnerability in the MOVEit file transfer software used by Wisconsin Physicians Service Insurance Corp. The breach occurred between May 27 and May 31, 2023, potentially exposing names, Social Security numbers, Medicare Beneficiary Identifiers, and other sensitive data. CMS has offered credit monitoring services and is issuing new Medicare cards to affected individuals. No cases of identity fraud have been reported, but proactive steps are being taken. Read more