Gramm-Leach-Blilely Act

News & Analysis as of

Notable New State Privacy and Data Security Laws – Part Two

This is the second in a two-part series addressing recent developments in state privacy and data security laws. This article addresses new laws about student privacy, enforcement/ punishment for data privacy and security...more

New Year, New Rules – The 2017 Illinois Personal Information Protection Act

On January 1, 2017, Illinois ushered in a broader and stronger personal information and data breach regime. The Illinois Personal Information Act (PIPA), 815 ILCS § 530, applies any entity that “handles, collects,...more

Incident Response Plans: A Comparison of US Law, EU Law and Soon-To-Be EU Law

The best way to handle any emergency is to be prepared. When it comes to data breaches, incident response plans are the first step organizations take to prepare....more

Court Enforces CFPB Civil Investigative Demand Against Tribal Lending Entity; Rejects Argument that Tribal Sovereignty Precludes...

On January 20, 2017, in CFPB v. Great Plains Lending, a three-judge panel of the Ninth Circuit Court of Appeals upheld the Consumer Financial Protection Bureau’s civil investigative demands for documents from lending...more

New York State Department of Financial Services Cybersecurity Regulation Poised to Reshape Existing Regulatory Landscape

In late December, New York State’s Department of Financial Services (“DFS”) released its revised proposed cybersecurity regulation (the “DFS Rule”). While the revisions pare back some of the DFS Rule’s original requirements...more

Cybersecurity and Data Privacy in 2017: Eight Topics to Follow

Throughout the past several years, data privacy and security practices have evolved into more than just defending against identity theft and protecting sensitive data. In fact, since 2014, to help raise awareness for data...more

Ninth Circuit Compels Tribal Lenders to Comply with CFPB Investigative Demand

On January 20, 2017, the Ninth Circuit affirmed a trial court ruling that ordered three tribal lending entities to comply with the Consumer Financial Protection Bureau’s (CFPB) civil investigative demands. The CFPB’s...more

What Will The Proposed New York Cybersecurity Requirements For Financial Institutions Really Make Companies Do?

In early September 2016, the New York Department of Financial Services (“DFS”) proposed a set of data security regulations (the “Proposal”) that would govern financial institutions, banks, and insurance companies subject to...more

Description of the Small Business Investment Company Program Participation by Unleveraged Funds

A Small Business Investment Company (SBIC) is a privately owned and operated company that makes long-term investments in American small businesses and is licensed by the United States Small Business Administration (SBA)....more

Bullet Points on a Primer: The Quick Version of the Sedona Conference’s Data Privacy Primer

The Sedona Conference has just published the public comment version of its Data Privact Primer, a publication of its very active Working Group on Data Security and Privacy Libaility. The primer is excellent. ...more

2017 Resolutions for Community Banks: A Focus on Cybersecurity

In December 2016, Thomas Curry, the Comptroller of the Currency, stated that cybersecurity was the single greatest systemic threat to our financial system. He was not being hyperbolic. Cybersecurity should be on...more

Do You Know Where Your Data Is Located? Why Knowing is Half the Battle

Whether you realize it or not, you are probably storing some personal or business data in the cloud. The National Institute of Standards and Technology (NIST) defines cloud computing as a model for enabling ubiquitous,...more

The Digital Download - Alston & Bird’s Privacy & Data Security Newsletter – November 2016

Updates on the EU: German DPA Publishes First Privacy Shield Guidelines, Requires German-Law Contracts for Transfers. On June 7, 2016, the European Commission adopted the EU-U.S. Privacy Shield. One question that many...more

2016 Breach Roundup, Part I: U.S. State Data Breach Notification Laws Highlights and Trends

In many respects, 2016 has been a remarkable year, but one constant with recent history is that multiple states (six this year) amended their breach notification statutes. As is commonly stated, the U.S. ...more

FTC Publishes Data Breach Response Guidelines

Whether resulting from a planned cyberattack or mere carelessness, data breaches are on the rise. In 2015, 781 data breaches were reported across the United States, with the average breach costing $3.8 million. In 2016, the...more

FTC continues vigorous use of enforcement authority

As observers ponder the CFPB’s future in a Trump Administration, the Federal Trade Commission’s continuing role as an enforcer of federal consumer financial protection laws should not be overlooked. Over the approximately...more

Federal Banking Agencies Propose “Enhanced Cyber Risk Management Standards” For the Largest Banks

In a major new cybersecurity initiative the federal banking agencies have issued an advanced notice of proposed rulemaking (“APNR”) seeking comment on enhanced cybersecurity standards for banking entities with $50 billion or...more

Fenwick Privacy Bulletin - Fall 2016

Privacy Shield – An Early Reflection - EU law generally prohibits the transfer of personal data from the European Economic Area to the U.S., unless the transfer is made in accordance with an authorized data transfer...more

Federal Reserve Proposes Rules Aimed at Banks Owning, Trading and Moving Commodities

On Sept. 23, 2016, the Federal Reserve issued proposed rules that could put pressure on investment banks, such as Morgan Stanley and Goldman Sachs, to divest certain energy assets and energy trading activities. Over the...more

US Federal Banking Agencies Issue Joint Report on Banking Activities and Investments

On September 8, 2016, the US Board of Governors of the Federal Reserve System, the US Federal Deposit Insurance Corporation and the OCC jointly issued, pursuant to a requirement under Section 620 of the Dodd-Frank Wall Street...more

Federal Banking Agencies Issue Dodd–Frank Mandated Report on Bank Activities and Investments

On September 8, 2016, the Board of Governors of the Federal Reserve System (Federal Reserve), the Federal Deposit Insurance Corporation (FDIC) and the Office of the Comptroller of the Currency (OCC) issued a 107-page joint...more

Orrick's Financial Industry Week in Review

Financial Industry Developments - OCC Discusses Marketplace Lending - On September 13, 2016, Comptroller of the Currency Thomas J. Curry discussed marketplace lending's risks and associated policy questions. He...more

New York State Proposes New Cybersecurity Regulation

The New York State Department of Financial Services (“DFS”) has proposed a new regulation imposing significant new cybersecurity requirements on banks, insurance companies, and other financial services institutions regulated...more

Privacy & Cybersecurity Update: New York State Proposes Cybersecurity Regulation for Financial Institutions

New York state has proposed a new regulation — to go into effect January 1, 2017 — that would require banks, insurance companies and other financial services institutions regulated by the New York State Department of...more

Cybersecurity News and Notes - September 2016

In Case You Missed It: The Federal Trade Commission has opened a public comment period to evaluate its Safeguards Rule (16. C.F.R. § 314.3). Under the Gramm-Leach-Bililey Act (GLBA), which regulates financial institutions,...more

161 Results
|
View per page
Page: of 7
Popular Topics

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:

Sign up to create your digest using LinkedIn*

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.

Already signed up? Log in here

*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.
×