Doctor Sally Sanchez specializes in surgeries that are not m…

Doctor Sally Sanchez specializes in surgeries that are not medically necessary such as face lifts. Since most of the procedures Doctor Sanchez performs would not be covered under health insurance, she only accepts credit cards for payment and does not bill insurance. Will Lee, a potential patient, looks online for a doctor to perform a facelift and finds Doctor Sanchez’s website. When Will visits Doctor Sanchez’s office, Will does not receive a privacy notice with his initial paperwork. Will asks Doctor Sanchez for a copy of the privacy notice and is told that the office does not maintain a privacy notice. Is it likely that Doctor Sanchez has violated HIPAA?

Most state data breach notification laws require affected co…

Most state data breach notification laws require affected companies to notify national CRAs of a qualifying incident “without unreasonable delay.” Which state requires companies to report to these CRAs within 48 hours – making this state reporting requirement the shortest of any state?

New Jersey’s new state comprehensive privacy law lacks a pri…

New Jersey’s new state comprehensive privacy law lacks a private right of action that would allow individuals to sue for violations of their consumer rights under the law. Which of the state comprehensive privacy laws studied in this class adopts a similar approach on this topic?

Garrett Gamer, an experienced poker player, signs up to play…

Garrett Gamer, an experienced poker player, signs up to play in a national poker tournament at Wild Cougar Casino in Las Vegas, Nevada. After arriving at the casino, Garrett decides to participate in 3 smaller tournaments in addition to the national poker tournament.  To cover the entry fees, Garrett pays the casino $20,000 in cash. Does this cash payment trigger a reporting requirement?

Virtual Armor, a company founded to assist businesses with a…

Virtual Armor, a company founded to assist businesses with addressing cybersecurity concerns, found itself the victim of a significant data breach. Fearing for the loss of trust by its customers, Virtual Armor’s top management chose to hide the evidence of the data breach. Approximately one year after the breach, the FTC informed Virtual Armor that the company and its top management were under investigation concerning the data breach. The results of the FTC investigation included both civil and criminal allegations against Virtual Armor and its top management. Which federal agency or agencies are able handle these civil and criminal allegations in court?

Sean Senzeni is a 2023 graduate of Georgia Tech who recently…

Sean Senzeni is a 2023 graduate of Georgia Tech who recently started a job at Tiger Security in Austin, Texas. Sean received an employee manual on the first day of work at the cybersecurity support center, which is unionized. Being a detail-oriented Georgia Tech graduate, Sean reads the entire manual. The manual is explicit that the company will monitor all emails in a person’s official work account. Sean learns from the manual that the company promises not to read any emails accessed at work that originate in an account other than the official work account. Based on these statements in the manual, Sean regularly checks his personal email accounts at work. After a month with Tiger Security, Sean realizes that the company is failing to pay its workers overtime as required by federal law. After this discovery, the topics of Sean’s personal emails change from general updates to complaints about working conditions at Tiger Security. After two months of working for Tiger Security, Sean is fired. Sean believes that his personal emails led to his termination. If Sean is correct, does Sean have a strong case that he should not have been fired?