OFCCP Says New Monthly Employment Data Reports Will Start With March 2025

Quick Hits OFCCP announced that its new Form CC-257 required monthly employment data reporting for covered federal contractors and subcontractors will launch in March 2025 and be due by April 15, 2025. Reports will cover a calendar month and be due the fifteenth of the following month unless the fifteenth falls on a weekend or holiday, on which the report will be due the next business day. The new reports…

  • Post category:Ogletree Deakins
  • Reading time:4 mins read
Continue ReadingOFCCP Says New Monthly Employment Data Reports Will Start With March 2025

Business Email Compromise Scams: What They Are, and How to Avoid Them

According to the FBI, Business Email Compromise (BEC) scams often involve the spoofing of a legitimate, known email address or the use of a nearly identical address to appear as someone known to or trusted by the victim. Real Estate Wire Fraud is a subcategory of BEC, in which criminal actors target individuals or companies executing large wires related to real estate transactions. From 2020 to 2022, there was a…

  • Post category:Ogletree Deakins
  • Reading time:7 mins read
Continue ReadingBusiness Email Compromise Scams: What They Are, and How to Avoid Them

Holiday Shopping Surge: Bracing for the Increased Retail Workplace Violence Risks

Quick Hits Retail employers face increased risks of workplace violence during the holiday season due to larger crowds, heightened stress, and potential understaffing, among other factors. Retail employers may want to consider steps to mitigate workplace violence risks such as developing a workplace violence prevention plan, training staff, and enhancing security measures during the busy shopping season. The welcome heightened retail activity can lead to increased stress, longer working hours,…

  • Post category:Ogletree Deakins
  • Reading time:4 mins read
Continue ReadingHoliday Shopping Surge: Bracing for the Increased Retail Workplace Violence Risks

Protecting Workers From Heat Illness: Nevada’s New Regulation

Quick Hits On November 15, 2024, the State of Nevada adopted a regulation to protect workers from heat-related illnesses, requiring covered employers to conduct job hazard analyses, designate employees for emergency response, and implement comprehensive safety programs. The regulation requires employers to implement measures that will “reasonably mitigate the risk of occupational exposure to heat illness for affected employees.” These include the provision of water, rest breaks, cooling methods, and…

  • Post category:Ogletree Deakins
  • Reading time:5 mins read
Continue ReadingProtecting Workers From Heat Illness: Nevada’s New Regulation

Germany’s Bureaucracy Reduction Act IV Will Begin the Process of Streamlining Formal Requirements of Employment Law

One component of this—the so-called “Bureaucracy Reduction Act IV” (BEG IV)—was promulgated in the Federal Law Gazette on October 29, 2024, and it will come into effect on January 1, 2025. Accordingly, it is worthwhile to take a closer look at the changes relevant to employers. Quick Hits Simplifying employment documentation: The Bureaucracy Reduction Act IV (BEG IV) allows essential employment terms and conditions to be transmitted in digital form…

  • Post category:Ogletree Deakins
  • Reading time:5 mins read
Continue ReadingGermany’s Bureaucracy Reduction Act IV Will Begin the Process of Streamlining Formal Requirements of Employment Law

Reporting Requirements Under the European Sustainability Reporting Standards

Quick Hits The ESRS reporting standards will be mandatory for all companies covered by the CSRD, which began in January 2024. The CSRD has a broad jurisdictional scope, and for companies operating within the European Union or with substantial business in the EU, understanding and implementing the CSRD’s obligations is crucial. The CSRD goes beyond existing voluntary reporting guidance in the United States to ensure that disclosures are complete and…

  • Post category:Ogletree Deakins
  • Reading time:5 mins read
Continue ReadingReporting Requirements Under the European Sustainability Reporting Standards

New York State Expands Guidance for Employers to Notify Current and Former Workers of Potential 9/11 Benefits

Quick Hits Employers that had workers in the areas of New York City impacted by the September 11th attacks may be required to notify those workers of two federal victim compensation funds. The new regulations seek to address the lack of awareness among many individuals who were exposed to harmful conditions following the September 11th attacks that they may be eligible for benefits. On November 7, 2024, the New York…

  • Post category:Ogletree Deakins
  • Reading time:6 mins read
Continue ReadingNew York State Expands Guidance for Employers to Notify Current and Former Workers of Potential 9/11 Benefits

OFCCP Issues First FY 2025 CSAL, Targeting 2,000 Establishments of Supply and Service Federal Contractors and Subcontractors for Audits

Quick Hits On November 20, 2024, OFCCP published a CSAL that identified 2,000 establishments of federal supply and service contractors and subcontractors for compliance reviews. The CSAL operates as a “courtesy notification” to a contractor that an OFCCP compliance review will be undertaken; the compliance review process begins when the company establishment receives a scheduling letter from OFCCP. OFCCP published the methodology it used for developing the November 2024 CSAL,…

  • Post category:Ogletree Deakins
  • Reading time:3 mins read
Continue ReadingOFCCP Issues First FY 2025 CSAL, Targeting 2,000 Establishments of Supply and Service Federal Contractors and Subcontractors for Audits

How to Effectively Utilize the MSHA Closeout Conference

Quick Hits Value of closeout conferences: Close-out conferences provide valuable insights into the basis for the violations and gravity cited, which are crucial for preparation and decision-making regarding future actions. Preparation and participation: Management may want to discuss observed conditions and issued citations, before and during the conference, and focus on listening, asking questions, and providing accurate facts to challenge allegations without antagonizing the inspector. Effective strategy: Focusing on well-supported…

  • Post category:Ogletree Deakins
  • Reading time:5 mins read
Continue ReadingHow to Effectively Utilize the MSHA Closeout Conference

New Jersey to Require Employers to Disclose Pay and Benefits in Job Postings, Promotion Opportunity Notices

Quick Hits The New Jersey governor signed legislation that will require employers to provide the “hourly wage or salary, or a range of the hourly wage or salary” in postings for new jobs or transfer opportunities. The law will also require employers to make “reasonable efforts” to advertise promotion opportunities to all current employees “in the affected department or departments of the employer’s business.” The law is set to take…

  • Post category:Ogletree Deakins
  • Reading time:3 mins read
Continue ReadingNew Jersey to Require Employers to Disclose Pay and Benefits in Job Postings, Promotion Opportunity Notices

Texas Federal Judge Strikes Down DOL’s New Overtime Rule

Quick Hits A federal judge in Texas struck down the DOL’s April 2024 overtime rule that sought to raise the minimum salary levels for the FLSA’s white-collar overtime exemption. The ruling comes in a challenge by the state of Texas and a group of more than a dozen business organizations. The DOL rule had raised the minimum salary level on July 1, 2024, to the equivalent of $43,888 per year,…

  • Post category:Ogletree Deakins
  • Reading time:5 mins read
Continue ReadingTexas Federal Judge Strikes Down DOL’s New Overtime Rule

Mexico’s Federal Government Initiates Process to Eliminate Autonomous Data Privacy Authority

Quick Hits The Mexican government is eliminating the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI). The access to public information and the protection of personal data will no longer be overseen by an autonomous institution but by an agency within the executive branch of the federal government. There are many uncertainties that the government has not addressed, including how a ministry of the executive…

  • Post category:Ogletree Deakins
  • Reading time:3 mins read
Continue ReadingMexico’s Federal Government Initiates Process to Eliminate Autonomous Data Privacy Authority

New York Legislature to Consider Amendment to the New York Retail Worker Safety Act

Quick Hits The New York governor’s office is discussing with the state legislature a possible amendment to the New York Retail Worker Safety Act, and it is anticipated that the legislature will vote on potential amendments in January 2025. Anticipated amendments include reducing the frequency of workplace violence training for employers with fewer than fifty employees, issuing training templates in English and the twelve most common non-English languages in New…

  • Post category:Ogletree Deakins
  • Reading time:4 mins read
Continue ReadingNew York Legislature to Consider Amendment to the New York Retail Worker Safety Act

Prospective Employees May Sign Louisiana Noncompete Agreements if They Contain an Effective Date During Employment

Quick Hits In 2022, the U.S. Court of Appeals for the Fifth Circuit in Rouses Enterprises, L.L.C. v. Clapp, held that Louisiana law does not allow an employer to enforce a noncompete agreement signed by a prospective employee. In Gallagher & Co. v. Annison, the Louisiana Court of Appeal, First Circuit, distinguished Rouses and held that noncompete agreements signed by prospective employees are enforceable where the agreements contain an effective…

  • Post category:Ogletree Deakins
  • Reading time:4 mins read
Continue ReadingProspective Employees May Sign Louisiana Noncompete Agreements if They Contain an Effective Date During Employment

Nebraska Says Yes to Marijuana Measure, but Florida, North Dakota, and South Dakota Just Say No

Quick Hits Nebraska voters approved marijuana use for medical purposes, but legal challenges remain. Ballot measures to legalize recreational marijuana failed in Florida, North Dakota, and South Dakota. A ballot measure to legalize psychedelic drugs was defeated in Massachusetts. On November 5, 2024, voters in Nebraska approved a ballot measure to legalize medical marijuana use, while voters in Florida, North Dakota, and South Dakota rejected measures to legalize recreational marijuana…

  • Post category:Ogletree Deakins
  • Reading time:5 mins read
Continue ReadingNebraska Says Yes to Marijuana Measure, but Florida, North Dakota, and South Dakota Just Say No

2024 Election Results: Missouri Voters Pass Ballot Measure for Sick and Safe Leave, Minimum Wage Increase

Quick Hits Missouri voters approved a ballot measure to enact a law that will require employers to allow employees to use up to fifty-six (56) or forty (40) hours of earned paid sick time per year depending on the size of the employer. Employees will be entitled to start accruing paid sick time on May 1, 2025, and employers must provide written notice of the paid sick time by April…

  • Post category:Ogletree Deakins
  • Reading time:5 mins read
Continue Reading2024 Election Results: Missouri Voters Pass Ballot Measure for Sick and Safe Leave, Minimum Wage Increase

Ontario’s Working for Workers Five Act, 2024—More Rules for Employers?

Quick Hits The Working for Workers Five Act, 2024 amended the Occupational Health and Safety Act’s definition of “industrial establishment” to exclude any office in a private residence, and the definitions of “workplace harassment” and “workplace sexual harassment” to include virtual activities. Under the Employment Standards Act, 2000, as amended, employers can require evidence for sick leave, but cannot demand a certificate from a qualified health practitioner. Key provisions of…

  • Post category:Ogletree Deakins
  • Reading time:4 mins read
Continue ReadingOntario’s Working for Workers Five Act, 2024—More Rules for Employers?

Colorado AG Proposes Amendments to the Colorado Privacy Act Rules to Implement Recent Legislative Updates

Quick Hits The Colorado Attorney General’s Office recently proposed draft amendments to the Colorado Privacy Act (CPA) Rules. The draft amendments are largely focused on consumer data and implement recent changes to the CPA that reflect increased regulation of entities that collect and use biometric information and personal information relating to children under the age of eighteen. The amendments also include a new process for entities and individuals to request,…

  • Post category:Ogletree Deakins
  • Reading time:7 mins read
Continue ReadingColorado AG Proposes Amendments to the Colorado Privacy Act Rules to Implement Recent Legislative Updates

German Employee Data Law Could Be on Its Way

Quick Hits Two German federal ministries have drafted legislation that would provide more legal certainty for employers regarding how to handle employee data. The legislature also wants to allow the use of AI applications, but within certain limits. The draft legislation would provide a detailed regulation on the basics of employee data processing. The aim of the legislation is to provide more legal certainty for employers. They inevitably collect and…

  • Post category:Ogletree Deakins
  • Reading time:7 mins read
Continue ReadingGerman Employee Data Law Could Be on Its Way

New Jersey Joins Data Privacy Party—New Jersey Data Protection Act Becomes Effective in January 2025

Quick Hits The NJDPA goes into effect on January 15, 2025, with its opportunity to cure provision sunsetting six months later on July 15, 2025. The NJDPA’s “sensitive data” definition encompasses more than is typical in comparable laws. The NJDPA applies to non-profit organizations and institutions of higher education in addition to for-profit businesses. Scope The NJDPA applies to companies that: conduct business in New Jersey OR produce products or…

  • Post category:Ogletree Deakins
  • Reading time:10 mins read
Continue ReadingNew Jersey Joins Data Privacy Party—New Jersey Data Protection Act Becomes Effective in January 2025

GAO Says OSHA Should Sharpen Its Focus on Ergonomic Hazards in Warehouses and Delivery Companies

Quick Hits A recent GAO report includes several recommendations for how OSHA should evaluate its national emphasis program on warehousing and distribution centers to “more fully protect workers” from ergonomic hazards. The GAO found that three major hazards—falls, slips, and trips; objects and equipment; and overexertion/bodily reaction—were the leading causes of most injuries and illnesses in general warehousing and last-mile delivery services. The GAO recommendations include revising the OSHA Form…

  • Post category:Ogletree Deakins
  • Reading time:6 mins read
Continue ReadingGAO Says OSHA Should Sharpen Its Focus on Ergonomic Hazards in Warehouses and Delivery Companies

California Governor Signs Legislation Expanding Infertility and IVF Coverage

Quick Hits Under SB 729, effective July 1, 2025, certain health insurance policies in California will be required to cover the diagnosis and treatment of infertility. Insured health plans with at least 101 participants will be required to provide coverage for the diagnosis and treatment of infertility; insured plans with up to 100 participants will be required to offer coverage. SB 729 does not affect employers that “self-fund” their health…

  • Post category:Ogletree Deakins
  • Reading time:6 mins read
Continue ReadingCalifornia Governor Signs Legislation Expanding Infertility and IVF Coverage

3 States to Consider Paid Sick Leave Initiatives on the November 2024 Ballot

Quick Hits Voters in three states—Alaska, Missouri, and Nebraska—will have a chance to vote on establishing paid sick leave in their states. The states could join the eighteen states and Washington, D.C., that already have paid sick leave laws. Election day is Tuesday, November 5, 2024. Each state has proposed measures to ensure workers have access to paid time off for health-related needs, reflecting a growing national trend toward expanding…

  • Post category:Ogletree Deakins
  • Reading time:7 mins read
Continue Reading3 States to Consider Paid Sick Leave Initiatives on the November 2024 Ballot

Settlement Requiring Near-Contemporaneous Adjudication of Properly Bundled Forms I-539 and I-765 to Sunset in January 2025

Quick Hits A group of H-4 and L-2 visa holders filed a lawsuit against the secretary of homeland security in April 2021, alleging that USCIS unlawfully delayed adjudicating their I-539 and I-765 applications, resulting in loss of employment. A settlement was reached in January 2023 in which USCIS agreed to return to its pre-March 2019 practice of simultaneously adjudicating bundled I-539 and I-765 applications after approving the principal’s I-129 petition,…

  • Post category:Ogletree Deakins
  • Reading time:5 mins read
Continue ReadingSettlement Requiring Near-Contemporaneous Adjudication of Properly Bundled Forms I-539 and I-765 to Sunset in January 2025

Federal Contractors: Your 2021 EEO-1s Might Be Disclosed by OFCCP if You Don’t Object!

Quick Hits New FOIA request noticed: A new FOIA request has been filed with OFCCP, seeking the release of federal contractors’ 2021 Type 2 Consolidated EEO-1 Reports in OFCCP’s possession. Deadline for objections: Contractors have forty days from the date of publication of OFCCP’s notice to object to the disclosure of their 2021 EEO-1 data. Separate from previous request: This is a new request for 2021 Consolidated EEO-1s; the most…

  • Post category:Ogletree Deakins
  • Reading time:5 mins read
Continue ReadingFederal Contractors: Your 2021 EEO-1s Might Be Disclosed by OFCCP if You Don’t Object!

Retention Bonus Found Not to Constitute ‘Wages’ Under the Massachusetts Wage Act

Quick Hits A Massachusetts appellate court found that a retention bonus did not constitute “wages” within the definition of that term set forth in the Massachusetts Wage Act. The court acknowledged that there are no Massachusetts cases that have held that a retention bonus is a “wage” within the meaning of the Massachusetts Wage Act. The court noted that the Massachusetts Supreme Judicial Court has not construed the Wage Act…

  • Post category:Ogletree Deakins
  • Reading time:7 mins read
Continue ReadingRetention Bonus Found Not to Constitute ‘Wages’ Under the Massachusetts Wage Act

Construction Chronicles: The Not-So-New and OMB-Approved Monthly Construction Utilization Report

Quick Hits OFCCP recently released a new construction scheduling letter and itemized listing, corresponding frequently asked questions (FAQs), and a renewed and revised Form CC-314, for covered construction contractors to notify OFCCP of new federal or federally assisted contracts or subcontracts in excess of $10,000, also known as the Notification of Construction Contract Award Portal (NCAP). But the agency has more in store for construction contractors. On September 30, 2024,…

  • Post category:Ogletree Deakins
  • Reading time:7 mins read
Continue ReadingConstruction Chronicles: The Not-So-New and OMB-Approved Monthly Construction Utilization Report

U.S. Virgin Islands Enacts Fair Chance for Employment Act

Quick Hits Employers may not inquire about an applicant’s conviction history before the applicant is determined to be otherwise qualified for a position, except when required by local and federal law. Employers are barred from asking, seeking from any source, or using as a factor in determining any condition of employment information regarding an applicant’s criminal record until the applicant has been given a conditional offer of employment. In the…

  • Post category:Ogletree Deakins
  • Reading time:6 mins read
Continue ReadingU.S. Virgin Islands Enacts Fair Chance for Employment Act

5 Key Multistate Considerations When Handling Reductions in Force

Quick Hits Documenting both the business reasons for a RIF and the objective criteria used to select employees for termination is crucial to mitigating the risk of discrimination claims and other legal challenges. Employers may want to note the various federal and state legal requirements, such as the WARN Act and any applicable mini-WARN acts when planning and executing a RIF. According to recent figures released by the U.S. Bureau…

  • Post category:Ogletree Deakins
  • Reading time:6 mins read
Continue Reading5 Key Multistate Considerations When Handling Reductions in Force

Female Employee Not Entitled to ‘All the Way to the Top’ Pay Gap Adjustment, German Regional Labor Court Rules

Quick Hits A female employee was not entitled to an “all the way to the top” compensation adjustment in a gender discrimination case, where the comparator was the highest-paid colleague worldwide, a German Regional Labor Court ruled. However, the female employee was awarded higher remuneration in accordance with the discrepancy between the medians of the comparison groups of men and women. The court determined that the discrepancy between the employer’s…

  • Post category:Ogletree Deakins
  • Reading time:5 mins read
Continue ReadingFemale Employee Not Entitled to ‘All the Way to the Top’ Pay Gap Adjustment, German Regional Labor Court Rules

Mastering Voting Leave Laws: Is Your Company Ready for Election Day? 

Quick Hits As Election Day—Tuesday, November 5, 2024—draws near, employers are considering their leave obligations. Various state, local, and municipal election-related laws have implications for multistate employers’ compliance plans. Notice posting and political speech laws also have implications for employers’ compliance plans. Leave Obligations There are three key issues employers may need to address when considering voting and election leave—posting notices, types of leave, and requests for leave. Posted Notices…

  • Post category:Ogletree Deakins
  • Reading time:5 mins read
Continue ReadingMastering Voting Leave Laws: Is Your Company Ready for Election Day? 

Día de Muertos Is Around the Corner: Are November 1 and 2 Mandatory Holidays in Mexico?

Quick Hits On November 1 and November 2, Mexico celebrates Día de Muertos, but this festivity is not considered under the FLL as a mandatory holiday. Under certain circumstances, November 1 and/or November 2 can be deemed as mandatory rest days. Día de Muertos Is Not a Mandatory Holiday As mentioned above, November 1 and/or November 2 are not established in Article 74 of the FLL as mandatory holidays that…

  • Post category:Ogletree Deakins
  • Reading time:3 mins read
Continue ReadingDía de Muertos Is Around the Corner: Are November 1 and 2 Mandatory Holidays in Mexico?

Human Resources’ Role in Data Privacy and Cybersecurity, Part III: Five Tips for Responding to Confidentiality Incidents

Quick Hits Key steps for managing a data breach incident include understanding what constitutes an incident, applying the organization’s framework and policies, and effectively communicating with the organization’s privacy officer and employees. Additional measures include promptly and proactively managing data breaches and reviewing and updating policies. The effectiveness of HR’s response to a breach of employee data can greatly influence employees’ confidence in the organization’s commitment to data privacy. 1.…

  • Post category:Ogletree Deakins
  • Reading time:5 mins read
Continue ReadingHuman Resources’ Role in Data Privacy and Cybersecurity, Part III: Five Tips for Responding to Confidentiality Incidents

November 2024 Visa Bulletin Shows No Advancement for Most Employment-Based Immigrant Visa Categories

Quick Hits The November 2024 Visa Bulletin shows no change from last month’s bulletin for employment-based categories for both final action dates and dates for filing, except for fourth preference for Certain Religious Workers. USCIS will honor dates for filing for I-485 Adjustment of Status applications filed in November 2024. USCIS recently confirmed that the annual limit for fiscal year (FY) 2025 will be higher than pre-pandemic numbers but lower…

  • Post category:Ogletree Deakins
  • Reading time:4 mins read
Continue ReadingNovember 2024 Visa Bulletin Shows No Advancement for Most Employment-Based Immigrant Visa Categories

Maryland Releases FAQs in Relation to Wage Range Transparency Act

Quick Hits The Maryland Department of Labor released FAQs regarding the state’s Wage Range Transparency Act, which took effect on October 1, 2024. The law applies to remote jobs for companies headquartered elsewhere if the employer seeks workers based in Maryland. Employers that do not handle their own job postings are still required to comply with the law. This article outlines some of the key points concerning the act for…

  • Post category:Ogletree Deakins
  • Reading time:5 mins read
Continue ReadingMaryland Releases FAQs in Relation to Wage Range Transparency Act

San Diego County Adopts Fair Chance Ordinance for Unincorporated Areas: What Employers Need to Know

Quick Hits Effective October 10, 2024, private employers must comply with the county’s Fair Chance Ordinance, which restricts the timing and use of criminal history in employment decisions. The ordinance applies to positions that involve performing at least two hours of work on average each week within the unincorporated areas of the county. Employers may not inquire about an applicant’s criminal history before making a conditional job offer, and must…

  • Post category:Ogletree Deakins
  • Reading time:5 mins read
Continue ReadingSan Diego County Adopts Fair Chance Ordinance for Unincorporated Areas: What Employers Need to Know

New York State Cybersecurity Regulations Take Effect on November 1, 2024

Quick Hits Certain requirements of the amended NYDFS cybersecurity regulations will take effect on November 1, 2024. Covered entities may need to update their policies and procedures, including with respect to corporate governance, encryption, incident response and business continuity plans, system testing, and employee training. On March 1, 2017, the NYDFS enacted comprehensive cybersecurity regulations for financial services companies and other covered entities. The cybersecurity regulations were most recently amended…

  • Post category:Ogletree Deakins
  • Reading time:4 mins read
Continue ReadingNew York State Cybersecurity Regulations Take Effect on November 1, 2024

Construction Chronicles: OFCCP’s Updated Scheduling Letter Brings New Compliance Challenges

Construction contractors undergoing compliance reviews after October 1, 2024, will be required to comply with expanded initial data and document requests contained in the revised letter. Contractors on a recent Corporate Scheduling Announcement List (CSAL)—a courtesy notification from OFCCP listing contractors selected for compliance evaluation—that have not yet been scheduled for compliance reviews may want to ensure they can produce the information requested. Quick Hits The letter imposes additional data…

  • Post category:Ogletree Deakins
  • Reading time:8 mins read
Continue ReadingConstruction Chronicles: OFCCP’s Updated Scheduling Letter Brings New Compliance Challenges

Travelling to the UK Using an Electronic Travel Authorisation (ETA)

Quick Hits The UK’s electronic travel authorisation (ETA) will soon apply to all nationals who do not currently require a visa to travel to the UK and who do not hold any other UK immigration status. From 27 November 2024, the scheme will initially be applicable to a number of non-European travellers, including those from the United States, Singapore, and Canada. On 5 March 2025, ETAs will be rolled out…

  • Post category:Ogletree Deakins
  • Reading time:3 mins read
Continue ReadingTravelling to the UK Using an Electronic Travel Authorisation (ETA)

Human Resources’ Role in Data Privacy and Cybersecurity, Part II: Assessing Five Key Areas of Risk

Quick Hits Five critical areas HR may want to assess for potential risks related to data breaches include inadequate privacy frameworks, training for employees regarding their data privacy duties, data flowing out of the organization, internal data transfers, and key employee life cycle moments. Even organizations with established policies may struggle with their implementation and enforcement. Well-designed training programs, including refresher courses, can help clarify employees’ data privacy and security…

  • Post category:Ogletree Deakins
  • Reading time:5 mins read
Continue ReadingHuman Resources’ Role in Data Privacy and Cybersecurity, Part II: Assessing Five Key Areas of Risk