Since we last wrote about how marketers can craft social media policies to offer engaging promotions while meeting the scrutiny of regulators, social media has continued to be a popular venue for marketers to reach consumers. The Federal Trade Commission (FTC) has also kept the spotlight on compliance with the FTC Guides Concerning Use of
Sheila Millar
Sheila A. Millar is a partner at Keller and Heckman LLP, where she represents businesses and trade associations on a variety of public policy and regulatory issues, including privacy, data security, cybersecurity and advertising matters, as well as product safety issues. She has been involved in a variety of audit and compliance projects, including, among other issues, privacy and data security audits, and is experienced in providing crisis management legal support to a variety of national and international companies and associations.
Ms. Millar is a frequent speaker on regulatory and public policy matters, and has authored many articles. Ms. Millar is one of the vice chairs of the International Chamber of Commerce (ICC) Marketing and Advertising Commission, and chair of its Working Group on Sustainability, where she spearheaded the development of the ICC Framework Guides on Environmental Marketing Claims.
Ms. Millar is AV® PreeminentTM Rated by Martindale-Hubbell and for the eigth consecutive year was selected by her peers for inclusion in The Best Lawyers in America® 2018 for her work in practicing Advertising Law. She has also received the distinguished honor of Advertising Law "Lawyer of the Year" 2014 in Washington, DC by Best Lawyers®, and was awarded Advertising and Marketing Lawyer of the Year USA by Finance Monthly for their Finance Monthly Global Awards 2017.
State Data Breach Notification Laws – Overview of Requirements for Responding to a Data Breach (Updated June 2016)
We have updated our summary of state data breach notification laws in light of recent amendments to some of the laws since our last update in September 2015.
Notably, Tennessee amended its data breach notification law, the Identity Theft Deterrence Act, effective July 1, 2016, by eliminating an encryption safe harbor and requiring that…
FAA Paves the Way for More Ubiquitous Use of Drones
On June 21, 2016, the Federal Aviation Administration (FAA) released its much-anticipated new Small Unmanned Aircraft System (UAS) Rule (Part 107). Simultaneously with its release, the White House issued a Fact Sheet for the new Rule. The Rule permits the operation of small UAS (an unmanned aircraft weighing less than 55 pounds) in the National…
Supreme Court Requires Plaintiffs to Show Harm or Risk of Harm, Not Bare Procedural Violation, to Get Statutory Damages
Last year, we noted that the Supreme Court had granted certiorari in a case that could limit the ability of plaintiffs to sue defendants over bare statutory violations without the showing of actual injury. The case implicates a wide variety of statutes that grant monetary awards to successful plaintiffs on…
GDPR Publication Starts Countdown to May 2018 Compliance Date for New Privacy Rules
The new General Data Protection Regulation (GDPR) (Regulation 2016/69, Apr. 27, 2016), approved by the European Parliament and the Council of the European Union, was formally published in the Official Journal of the European Union on May 4, 2016, and will replace the Data Protection Directive (Directive 95/46/EC) effective May 28, 2018. This…
California Adds Styrene to Proposition 65 List; Proposes NSRL
On April 22, 2016, California’s Office of Environmental Health Hazard Assessment (OEHHA) added styrene to the Proposition 65 list of carcinogens. OEHHA maintains a list of chemicals required under Proposition 65 (formally, the California Safe Drinking Water and Toxic Enforcement Act) that are “known to the state” to be reproductive toxicants or carcinogens based on…
NTIA Steps into IoT Debate
Continuing its tradition of active involvement in digital economy questions, the Department of Commerce’s (DOC) National Telecommunications and Information Administration (NTIA) issued a request for public comment on questions posed by the growth of the Internet of Things (IoT). The explosive growth of connected products, anticipated to reach 25 billion by 2020, is one reason…
Appeals Court Agrees That Health Solutions Provider’s Insurance Requires Defense in Data Disclosure Class Action
Availability of insurance is often among the first questions that arises when a company encounters a data breach or other Internet-related problem involving company records, even where the company lacks a cyberinsurance policy. The federal Fourth Circuit Court of Appeals recently affirmed a ruling by a District Court that required insurance coverage for an inadvertent…
FCC Adopts Broadband Privacy NPRM
At its Open Meeting yesterday, the Federal Communications Commission (FCC) adopted a Notice of Proposed Rulemaking (NPRM) that would apply the privacy protections in Section 222 of the Communications Act to broadband Internet Service Providers (ISPs). The text of the NPRM, which reportedly seeks public comment on more than 500 questions relating to privacy and…
CPSC Obtains Record $15.45 Million Settlement from Dehumidifier Manufacturer
The U.S. Consumer Product Safety Commission (CPSC) today announced that it had obtained a record $15,450,000 settlement of civil penalty liability from three Gree Electric entities (Gree Electric Appliances, Inc., of Zhuhai; Hong Kong Gree Electric Appliances Sales Co., Ltd.; and Gree USA Sales, Ltd.) (collectively, Gree). (The settlement is provisional until after the public…
