With millions of Internet of Things (IoT) devices from phones to smart home censors flooding the market every year, effective cybersecurity to help mitigate risks to devices is vital. New guidance from The National Institute of Standards and Technology (NIST), IoT Non-Technical Supporting Capability Core Baseline (NISTIR 8259B), is intended to help manufacturers identify the
NIST on Track to Release Draft Security Criteria for Consumer IoT Products
On August 31, 2021, the National Institute of Standards and Technology (NIST) released its draft white paper, DRAFT Baseline Security Criteria for Consumer IoT Devices. The draft white paper is in response to Executive Order (EO) 14028, “Improving the Nation’s Cybersecurity,” which requires NIST, in collaboration with other agencies, to educate the public
President Biden Nominates Alvaro Bedoya for FTC Commissioner
On September 13, 2021, President Biden nominated Alvaro Bedoya for Commissioner of the Federal Trade Commission (FTC) to replace outgoing FTC Commissioner Rohit Chopra. Earlier this year, President Biden nominated Chopra to head the Consumer Financial Protection Bureau (CFPB). If confirmed, Bedoya would round out the slate of FTC commissioners and solidify the agency’s Democratic
FBI and CISA Warn Businesses to be Vigilant About Ransomware Attacks
As the Labor Day weekend approaches, the Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency (CISA) are warning U.S. entities to remain alert and protect against the rising incidence of ransomware attacks over holidays and weekends. A joint cybersecurity advisory issued on August 31, 2021 reviews recent ransomware attacks that occurred over
Could COPPA Safe Harbor Changes Be in Store?
The Federal Trade Commission (FTC) took the unprecedented step of removing one of the approved Safe Harbor organizations under the Children’s Online Privacy Protection Act (COPPA) for failing to provide effective monitoring and assessment of its member companies’ websites, as required under the COPPA Rule. Earlier this year, Commission staff warned Aristotle International, Inc., whose
CARU Issues Updated Guidelines for Children’s Advertising
The Children’s Advertising Review Unit (CARU), a division of BBB National Programs, recently updated its Self-Regulatory Guidelines for Children’s Advertising. Important updates include:
- To align with the Children’s Online Privacy Protection Act (COPPA), the Guidelines now apply to national advertising primarily directed to children under the age of 13 instead of under 12, regardless
The Changing Face of Environmental Marketing Claims
The circular economy. Sustainability. Single-use plastics bans. Marine litter. Microplastics. Climate change. These are only some of the issues driving the demand for more “environmentally friendly” products. In recent years, we have seen a surge in product and raw material innovations designed to improve environmental performance, and companies around the world are pledging to take
White House Nominates Third CPSC Commissioner
After more than five months of silence regarding its choices to lead the U.S. Consumer Product Safety Commission (“CPSC”), the Biden Administration has now unveiled all three of its CPSC nominees in less than two weeks, with its July 13 announcement of President Biden’s intent to nominate Richard Trumka, Jr., currently General Counsel and
FTC Finalizes Made in USA Labeling Rule
Goods advertised as “Made in the USA” (MUSA) are potential money-makers for manufacturers tapping into the market of consumers who seek home-grown products. In recent years, however, the Federal Trade Commission (FTC) has investigated companies that deceptively marketed their goods as American-made, sending out warning letters, closing out investigations of companies that quickly change their
EU Adopts New Standard Contractual Clauses For Transfers of Personal Data
On June 4, 2021, the European Commission adopted a new set of standard contractual clauses (SCCs) governing exchanges of personal data between data controllers and data processors and transfers of personal data from the EU to the U.S. or other countries that are not deemed to ensure adequate protection for personal data. The revised SCCs