In this issue:

- Kaiser Foundation Health Plan Settles California Attorney General Charges over Delayed Data Breach Notification

- Status of the EU Regulation and the Safe Harbor Framework

- FTC Steps Up Enforcement of Safe Harbor Compliance Claims

- Apple Agrees to Refund at Least $32.5 Million to Settle FTC Complaint Alleging That It Charged Kids’ In-App Purchases Without Parental Consent

- UK Information Commissioner’s Office Issues Guidance for App Developers

- Excerpt from Kaiser Foundation Health Plan Settles California Attorney General Charges over Delayed Data Breach Notification:

Kaiser Foundation Health Plan, Inc. (Kaiser) recently agreed to settle charges brought by California Attorney General Kamala Harris alleging that Kaiser, a component of Kaiser Permanente, the largest health maintenance organization in the U.S., violated California’s unfair competition law by taking too long to notify more than 20,000 current and former employees that their personal information had been compromised. The case and its settlement may have significant implications for businesses that suffer data security incidents requiring notification to affected persons.