Library of Congress

Note: External links, forms and search boxes may not function within this collection

minimize

Legal Blawgs Web Archive Collection

This is an archived Web site from the Library of Congress

http://privacylaw.proskauer.com/

Archived: 02/09/2009 at 19:22:57

first First (02/07/2008)    previous Previous  #13 of 26  Next next    Last (12/02/2009) last entry

Florida Cases Remind Retailers that Printing Expiration Dates after Enactment of the Receipt Clarification Act Violates FACTA

The Fair and Accurate Credit Transactions Act (“FACTA”) amendments to the Fair Credit Reporting Act prohibit, among other things, the printing of expiration dates on receipts presented to credit or debit card holders.  Two recent cases from the U.S. District Court for the Southern District of Florida, Smith v. Zazzle.com, Inc. (see our blog post here) and Smith v. Under Armour, Inc., reject prior holdings that the term “print” is broad enough to encompass the information included when a seller electronically transmits a receipt.  These cases also make clear, as we stated in our June 18, 2008 post, that businesses printing expiration dates after the June 3, 2008 enactment of the Credit and Debit Card Receipt Clarification Act of 2007 (“Clarification Act”) are violating FACTA’s truncation requirements. In fact, the Zazzle.com case specifically mentions that the Clarification Act does not apply because the conduct complained of occurred after the Act’s enactment.

The Clarification Act, which shielded from a finding of willful noncompliance with FACTA any business that printed an expiration date on a cardholder receipt between December 4, 2004 and the enactment of the Clarification Act, did not completely eliminate the statutory requirement to not print expiration dates on cardholder receipts.  Accordingly, businesses that print expiration dates on such receipts after June 3, 2008, even when card numbers are properly truncated, may incur liability under FACTA.

Google Execs Face Privacy-Related and Other Criminal Charges for Taunting Video

Several Google executives, including the Company’s global privacy counsel, Peter Fleischer, will face criminal charges in Italian court stemming from Italian authorities’ two-year investigation of a video posted on Google Video showing a disabled teen being taunted by classmates. The video, posted in 2006, depicts four high school boys in a Turin classroom taunting a classmate with Down syndrome and ultimately hitting the young man over the head with a box of tissues. Google removed the video on November 7, 2006, less than twenty-four hours after receiving multiple complaints about the video. Nonetheless, Fleischer and his Google colleagues face criminal charges of defamation and failure to exercise control over personal information that carry a maximum sentence of three (3) years.

Continue Reading...

Rehearing En Banc Denied in Quon . . . With Dissent

On Tuesday, the Ninth Circuit denied rehearing en banc in Quon v. Arch Wireless, previously discussed here.  The dissent (1)  disagrees with the panel's conclusion that the SWAT team members had a reasonable expectation of privacy in the text messages on the grounds that the decision undermines the standard established by the Supreme Court in O’Connor v. Ortega, 480 U.S. 709 (1987); and (2)  finds that the method used by the panel to determine whether the search was reasonable conflicts with Supreme Court precedent holding that the Fourth Amendment does not require the government to use the “least intrusive means” when conducting a “special needs” search.  The dissent can be found here.  Judge Wardlaw's concurrence in the denial of rehearing en banc can be found here.  We will keep you posted on this one.

Enforcement of E-Verify Regulation Postponed Once Again

Today is Data Privacy Day and we bring you a special post regarding E-Verify from guest contributors Lawrence Lorber, Malcolm Harkins, and James Segroves, of Proskauer's DC office, and David Grunblatt of Proskauer's Newark office.  Enforcement of a controversial federal regulation that raised significant privacy concerns has been postponed once again as the result of a legal challenge filed by Proskauer on behalf of the Chamber of Commerce of the United States of America and four other trade associations. See Chamber of Commerce of the U.S. v. Napolitano, Civil Action No. AW-08-3444 (D. Md.). The regulation in question would have required most government contractors and subcontractors to participate in E-Verify, an Internet-based system that allows employers to verify that individuals are eligible to work in the United States using an employee’s Social Security Number and other personal information. Pursuant to a January 27, 2009 agreement between the parties, enforcement of the regulation has been postponed until May 21, 2009, in order to give the recently inaugurated Administration of President Barack Obama an opportunity to review the regulation. A notice to this effect is scheduled to be published in the Federal Register on January 30, 2009.

Continue Reading...

District Court Rules FACTA Inapplicable to Online Receipts

On December 8, 2008, in Smith v. Zazzle.com Inc., No. 08-22371-CIV-KING, 2008 U.S. Dist. LEXIS 101050 (S.D. Fla. Dec. 9, 2008) Judge James Lawrence King of the Southern District of Florida held FACTA’s credit card number truncation requirement inapplicable to receipts displayed on-screen or printed by online customers.  Judge King dismissed the case on this basis (the order is available here).  The order contradicts one last year in the same district, Grabein v. 1-800 Flowers Inc., No. 0722235 (S.D. Fla. Jan. 29, 2008) (reported here), but is consistent with three other Southern District of Florida cases: Grabein v. Jupiterimages Corp., No. 07-22288 (S.D. Fla. July 7, 2008), Haslam v. Federated Dep't Stores Inc., No. 07-61871 (S.D. Fla. May 16, 2008) and Edwin King v. Movietickets.com, No. 07-22119 (S.D. Fla. Feb. 13, 2008).

Continue Reading...

Consumer Advocacy Groups Request Federal Trade Commission Action To Stop Perceived "Threat" From Mobile Marketing

In a year when behavioral advertising was already expected to be at the top of the hot button privacy issues list, on January 13, 2008, the Center for Digital Democracy (“CDT”) and U.S. Public Interest Research Group (“US PIRG”) filed a document with the Federal Trade Commission (“FTC”) urging the FTC to investigate online mobile marketing practices, to take new actions to stop mobile marketing activities that “abuse consumer rights,” and to recommend new federal legislation and enhanced enforcement power for the FTC in this area. The document expands on the groups’ concerns about online behavioral advertising generally – the delivery of ads tailored to consumers’ interests based on browsing habits and/or consumer demographics – to the mobile space. In doing so the groups cite the potential for even greater consumer harm because of the additional possibility of location-based targeting linked to a cell phone or other mobile device that is typically tied to a single consumer who uses it for multiple applications, including voice, video and data.      

Continue Reading...

Data Privacy Day, Privacy After Hours

For anyone who will be in Los Angeles on Data Privacy Day, January 28, 2009, please join me for IAPP's Privacy After Hours at the X bar in Century City, 6-8 p.m.  Please RSVP to me at tforsheit@proskauer.com.

X bar, Hyatt Regency Century Plaza, 2025 Avenue of the Stars, Los Angeles, CA 90067, 310.551.3332, http://www.hyatt.com/gallery/xbar/index.html

New York Restricts Employer Use of Employee Social Security Numbers

New York now prohibits employers from publicly displaying employee Social Security Numbers (“SSNs”), printing employee SSNs on identification cards, and communicating to the general public employee SSNs or “personal identifying information.”   For more information, see this Client Alert from Proskauer's Employment Law Counseling and Training Practice Group.

"Address Book Harvesting" Issues to Contend With

More and more companies have been considering engaging in marketing campaigns that involve “address book scraping,”  in which a user is asked to import his contacts (i.e., the e-mail addresses he has stored in his e-mail account address book) into his social networking Web site or other online service so that a message can be sent to those contacts inviting them to join the social network or to participate in a joint offering of the company and its partner.  In some cases, the user is asked to provide the username and password for his e-mail account so that the import can be done transparently.

There are a number of things to look out for in connection with these campaigns:

Continue Reading...

Department of Education Issues Final Regulations Amending FERPA

The Family Educational Rights and Privacy Act (20 U.S.C. 1232g; 34 CFR Part 99) (“FERPA”) imposes various requirements on educational institutions regarding the privacy of personally identifiable information contained in education records of students.  On December 9, 2008, the U.S. Department of Education (“DOE”) published final rules amending the regulations that implement FERPA.   

 

Originally proposed on March 28, 2008, the DOE published a notice which proposed various changes to FERPA and its implementing regulations “to implement various statutory changes made to FERPA to implement two recent US Supreme Court decisions, to respond to changes in information technology, and to address other issues identified through the Department’s experience in administering FERPA.”  (73 FR 74806).  According to the DOE, approximately 121 parties submitted comments in response to the March, 2008 NPRM.  The Final Rules become effective January 8, 2009.

 

Continue Reading...