On January 10, 2025, the Consumer Financial Protection Bureau (CFPB) initiated rulemaking processes to examine and create a framework regarding data privacy and consumer protections in the digital payments industry. In a...more
1/17/2025
/ Consumer Financial Protection Bureau (CFPB) ,
Consumer Privacy Rights ,
Cryptocurrency ,
Data Privacy ,
Data Security ,
Digital Assets ,
Electronic Fund Transfer Act ,
Financial Services Industry ,
FinTech ,
Payment Systems ,
Popular ,
Regulation E
On December 3, 2024, the Consumer Financial Protection Bureau (CFPB) issued a notice of proposed rulemaking (NPR) – Protecting Americans from Harmful Data Broker Practices. The CFPB’s proposal would amend Regulation V, which...more
The Consumer Financial Protection Bureau (CFPB) published a report on November 12, 2024, examining state and federal privacy protections for consumer financial data....more
In this first installment of our series on the automotive and mobility sector, Cooley cyber/data/privacy lawyers introduce the key data privacy legal issues facing the automotive and mobility sector and provide an overview of...more
On September 30, 2024, the Federal Housing Administration (FHA) published a draft Mortgagee Letter (ML) with updated cyber incident reporting requirements and a call for interested stakeholders to provide feedback to the...more
On July 18, 2024, US District Judge Paul Engelmayer of the Southern District of New York issued a detailed 107-page opinion and order dismissing most of the US Securities and Exchange Commission (SEC) case against SolarWinds...more
The Federal Housing Administration (FHA) published Mortgagee Letter 2024-10 (Letter) on May 23, 2024, requiring FHA-approved Mortgagees to report certain cyber incidents to the Department of Housing and Urban Development...more
On March 27, 2024, the Cybersecurity and Infrastructure Security Agency (CISA) within the Department of Homeland Security published a long-awaited notice of proposed rulemaking (NPRM) pursuant to the Cyber Incident Reporting...more
On February 26, 2024, the National Institute of Standards and Technology (NIST) released the long-awaited second version of the Cybersecurity Framework (CSF). Dubbed “CSF 2.0,” it contains a few significant changes...more
Without much fanfare, the Washington attorney general’s office updated its My Health My Data (MHMD) Act guidance FAQ in January 2024. Specifically, the updated guidance states that the consumer health data privacy policy must...more
On November 1, 2023, the New York Department of Financial Services (NYDFS) finalized its proposed cybersecurity rules, which build upon existing NYDFS cybersecurity requirements in the Part 500 Cybersecurity Rules....more
On July 13, 2023, the White House unveiled its National Cybersecurity Strategy Implementation Plan (NCSIP or implementation plan), following the release of the National Cybersecurity Strategy....more