Company X has entrusted the processing of their payroll data to Provider Y. Provider Y stores this encrypted data on its server. The IT department of Provider Y finds out that someone managed to hack into the system and take a copy of the data from its server. In this scenario, whom does Provider Y have the obligation to notify?

Which venture would be subject to the requirements of Section 5 of the Federal Trade Commission Act?

California's SB 1386 was the first law of its type in the United States to do what?

Federal laws establish which of the following requirements for collecting personal information of minors under the age of 13?

An employee of company ABCD has just noticed a memory stick containing records of client data, including their names, addresses and full contact details has disappeared. The data on the stick is unencrypted and in clear text. It is uncertain what has happened to the stick at this stage, but it likely was lost during the travel of an employee. What should the company do?