California Consumer Privacy Act (CCPA), Financial Institutions, Cybersecurity

CPPA’s First Enforcement Advisory Focuses on Applying Data Minimization Principles to Consumer Requests

Skadden, Arps, Slate, Meagher & Flom LLP on 4/19/2024

On April 2, 2024, the Enforcement Division of the California Privacy Protection Agency (CPPA) issued Enforcement Advisory No. 2024-01. This first-ever enforcement advisory focuses on promoting compliance with California...more

More Privacy, Please - September/October 2023

Troutman Pepper on 11/28/2023

Editor’s Note: The FTC continues to crack down on privacy and cybersecurity, including issuing a new warning to tax preparation companies and entering into a consent decree with 1Health.io. VPPA and BIPA litigation continues...more

What Non-Financial Institutions Need to Know About Gramm-Leach-Bliley

Society of Corporate Compliance and Ethics... on 1/19/2023

The Gramm-Leach-Bliley Act (GLBA) is typically referred to in the context of financial institutions. It requires offerers of consumer financial products to explain how they share information and protect sensitive data. It’s...more

Privacy, Data and Cybersecurity Quick Bytes | Issue 1

Katten Muchin Rosenman LLP on 1/18/2023

Welcome to the inaugural issue of Katten’s Privacy, Data and Cybersecurity Quick Bytes. Each month, Quick Bytes will highlight the latest news and legal developments involving privacy, data and cybersecurity issues across the...more

Preparing for Cyberattacks and Limiting Liability

Miller Canfield on 3/18/2022

The U.S. government and military experts have been warning U.S. companies that Russia may launch significant cyberattacks against critical infrastructure, financial institutions and businesses in retaliation for the sanctions...more

New Rules, Enforcement Actions Make Financial Institutions’ Planning for Cyberattacks Even More Imperative

Skadden, Arps, Slate, Meagher & Flom LLP on 1/25/2022

Takeaways - Implementing strong cybersecurity practices helps companies prepare for future regulatory requirements. Incident-response plans must enable financial institutions to give timely and accurate notifications...more

Expanded Safeguards Rule Applicable to More Financial Institutions; Gives More Specificity on Security Requirements

Morgan Lewis on 11/22/2021

The Federal Trade Commission recently finalized a long-discussed update to its cybersecurity Safeguards Rule that includes more specific criteria for what financial institutions must implement as part of their information...more

California Attorney General Focuses on Targeted Advertising and Disclosures in CCPA Enforcement

Hudson Cook, LLP on 10/1/2021

The Office of the Attorney General of California began enforcing the California Consumer Privacy Act ("CCPA") more than a year ago and recently released a set of enforcement case examples it has pursued against businesses....more

New York’s DFS Publishes A Cyber Insurance Risk Framework

Husch Blackwell LLP on 3/9/2021

Keypoint: New York’s Division of Financial Services (DFS) now requires Property and Casualty Insurers writing cyber insurance to comply with the Division’s Cyber Insurance Risk Framework to manage their risk. In her...more

Governor Cuomo Proposes Greater Data Privacy Protections and BankTech Assistance for New York Financial Institutions

Hinshaw & Culbertson - Privacy, Cyber & AI... on 1/29/2021

Happy Data Privacy Day! Today we report on New York Governor Andrew Cuomo's recent State of the State address, in which he announced the state's 2021 policy agenda. Included in the Governor's agenda are enhanced consumer...more

Privacy & Cybersecurity Update - October 2020

Skadden, Arps, Slate, Meagher & Flom LLP on 11/3/2020

In this month's edition of our Privacy & Cybersecurity Update, we examine the U.S. Treasury's advisories regarding the role of financial intermediaries in ransomware payments, a ruling by the Israeli data protection authority...more

Financial Services Report – Fall 2020

Morrison & Foerster LLP on 10/16/2020

We join the nation in mourning the passing of Supreme Court Justice Ruth Bader Ginsburg. Over her 20-year career before appointment to the D.C. circuit court, Justice Ginsburg fought for equal rights in the workplace, among...more

The CCPA Is Here: What Financial Institutions Need to Know about the California Consumer Privacy Act

Blank Rome LLP on 10/12/2020

As of January 1, 2020, the California Consumer Privacy Act of 2018 (CCPA) is now the law of the land, having gone into effect at the beginning of this year. One of the more complex issues concerning the CCPA pertains to the...more

Data Privacy + Cybersecurity Insider - October 2020

Robinson & Cole LLP on 10/5/2020

CYBERSECURITY - OFAC Issues Advisory on Sanctions for Facilitating Ransomware Payments - On October 1, 2020, the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) issued an advisory “to...more

CCPA Compliance Strategies for Financial Institutions

Blank Rome LLP on 2/13/2020

The California Consumer Privacy Act provides some relief to financial institutions, but these carve-outs are not a “get out of jail free” card. Blank Rome’s David Oberly and First National Bank of Long Island’s Tanweer Ansari...more

California Data Broker List Comes Online

Hudson Cook, LLP on 2/4/2020

As 2019 has become 2020, many businesses - including financial institutions - are rightly focused on setting up their CCPA compliance structures. But those businesses also should consider a separate yet related law passed by...more

From California to Nevada: Another State Privacy Law That You Need to Know

Robinson+Cole Data Privacy + Security Insider on 10/14/2019

While we’ve all discussed the California Consumer Privacy Act (CCPA) at length, Nevada was busy amending its internet privacy law and in the process beat California’s deadline for the effective date by three months. Nevada’s...more

CCPA Security FAQs: Does the CCPA open insurance companies to increased litigation?

BCLP on 10/4/2019

Yes. The CCPA provides a partial exemption for information collected by financial institutions that are subject to the Gramm Leach Bliley Act (e.g., information about individuals who have obtained personal financial...more

The California Consumer Privacy Act: What Financial Services Providers Need to Know

Davis Wright Tremaine LLP on 6/21/2019

California enacted the nation’s most extensive consumer privacy law after only a week of legislative debate. The California Consumer Privacy Act of 2018 (“CCPA”) creates detailed notice, opt-out/opt-in, access, and erasure...more

Exempt or Not Exempt? California Consumer Privacy Act and the Gramm-Leach-Bliley Act

Davis Wright Tremaine LLP on 4/16/2019

For the last 18 years, most financial services businesses could sum up their privacy practices with just four letters: G-L-B-A, also known as Title V of the Gramm-Leach-Bliley Act, Public Law 106-102, and its implementing...more

Weekly Trend Report – 4/11/2019 Insights

Association of Certified E-Discovery... on 4/11/2019

Insight into where e-discovery, information governance cybersecurity, and digital transformation are heading – who is doing what now or in the future, what works and what doesn’t, and what people wish they could do but can’t...more

The Digital Revolution Takes on New Meaning: Among Calls for Heightened U.S. Data Privacy Measures, California is King

Cadwalader, Wickersham & Taft LLP on 3/4/2019

California’s ambitious new data privacy law, the California Consumer Privacy Act of 2018 (“CCPA”), will go into effect on January 1, 2020 and promises to bring a new era of digital regulation to America’s shores. ...more

Analyzing How Financial Institutions Are Treated In Proposed State Privacy Laws

Husch Blackwell LLP on 3/1/2019

One of the myriad of issues arising from the California Consumer Privacy Act (CCPA) is the extent to which financial institutions subject to the Gramm-Leach-Bliley Act (GLBA) must comply with the CCPA’s requirements in light...more

California Consumer Privacy Act: The Challenge Ahead – The Interplay Between the CCPA and Financial Institutions

Hogan Lovells on 12/10/2018

This is the ninth installment in Hogan Lovells’ series on the California Consumer Privacy Act. The California Consumer Privacy Act of 2018 (“CCPA”) exempts information that is collected, processed, sold, or disclosed...more

The Digital Download – Alston & Bird’s Privacy & Data Security Newsletter – October 2018

Alston & Bird on 10/30/2018

Features - International Updates (Excluding the EU) - India’s Draft Data Protection Bill: Another GDPR Around the Corner? India recently introduced the Personal Data Protection Bill 2018. ...more

California Consumer Privacy Act (CCPA) › Financial Institutions › Cybersecurity

"My best business intelligence, in one easy email…"