As compliance professionals reflect upon the past year, many will look back with frustration on efforts taken to comply with the Department of Justice’s Data Security Program (the “DSP” or “Rule”)....more
On September 24, 2025, the National Institutes of Health (“NIH”) published a policy entitled “Enhancing Security Measures for Human Biospecimens” (the “Policy”). The Policy is based on Executive Order 14117, “Preventing...more
On April 11, 2025, the Department of Justice (“DOJ”) released additional detail regarding the Final Rule implementing former President Biden’s Executive Order 14117, “Preventing Access to Americans’ Bulk Sensitive Personal...more
4/15/2025
/ China ,
Compliance ,
Corporate Counsel ,
Data Privacy ,
Department of Justice (DOJ) ,
Enforcement Actions ,
Executive Orders ,
Final Rules ,
New Guidance ,
Personal Data ,
Sensitive Personal Information
Today, the Department of Justice’s (“DOJ”) Final Rule implementing former President Biden’s Executive Order 14117, “Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by...more
On January 8, 2025, the Department of Justice (“DOJ”) published its Final Rule to implement President Biden’s Executive Order 14117, “Preventing Access to Americans’ Bulk Sensitive Personal Data and United States...more
1/9/2025
/ Biometric Information ,
Broker-Dealer ,
CFIUS ,
Compliance ,
Cybersecurity ,
Cybersecurity Information Sharing Act (CISA) ,
Data Privacy ,
Data Protection ,
Data Security ,
Department of Justice (DOJ) ,
Enforcement ,
Executive Orders ,
Final Rules ,
Foreign Subsidiaries ,
Geolocation ,
Hong Kong ,
International Data Transfers ,
Life Sciences ,
Macau ,
National Security ,
PRC ,
Privacy Laws ,
Recordkeeping Requirements ,
Regulatory Requirements ,
Restricted Transactions ,
Risk Management ,
Sensitive Personal Information
While students are about to embark on their holiday break, there is no such luck for educational technology (“EdTech”) providers. Privacy, cybersecurity, and artificial intelligence compliance obligations have proliferated...more
On October 29, 2024, the Department of Justice (“DOJ”) published its Notice of Proposed Rulemaking (“NPRM”) to implement President Biden’s Executive Order 14117, “Preventing Access to Americans’ Bulk Sensitive Personal Data...more
11/5/2024
/ Biometric Information ,
CFIUS ,
China ,
Cybersecurity Information Sharing Act (CISA) ,
Data Brokers ,
Data Transfers ,
Department of Justice (DOJ) ,
Employment Contract ,
Executive Orders ,
Federal Food Drug and Cosmetic Act (FFDCA) ,
Financial Services Industry ,
Geolocation ,
Iran ,
National Security ,
North Korea ,
PRC ,
Prohibited Transactions ,
Proposed Rules ,
Recordkeeping Requirements ,
Risk Management ,
Russia ,
Sensitive Business Information
On October 22, 2024, the Securities and Exchange Commission (“SEC”) filed settled enforcement orders involving four current and former public companies – Unisys Corp., Avaya Holdings Corp., Check Point Software Ltd, and...more
11/1/2024
/ Corporate Governance ,
Cybersecurity ,
Data Breach ,
Disclosure Requirements ,
Enforcement Actions ,
Failure To Disclose ,
Publicly-Traded Companies ,
Securities and Exchange Commission (SEC) ,
Securities Regulation ,
Securities Violations ,
SolarWinds