News & Analysis as of May 6, 2025

Cybersecurity › Comment Period › Data Breach

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

To Comment or Not to Comment: Looking at the Biden Administration’s HIPAA Cybersecurity Proposed Reg

McDermott+ on 1/30/2025

One of the Biden Administration’s last healthcare regs was a proposed rule that, if finalized, would make significant changes to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule to...more

PEOs Need to Prepare for Increased Cybersecurity Requirements Thanks to Proposed HIPAA Security Rule Revisions

Fisher Phillips on 1/8/2025

With the HIPAA Security Rule set to undergo a massive overhaul to boost cybersecurity protections, PEOs need to take note. After all, as stewards of worksite employee and client company data – and as sponsors of group health...more

Proposed Updates to HIPAA Security Rule Would Require Entities to Adopt Enhanced Cybersecurity Measures

Fisher Phillips on 1/7/2025

The HIPAA Security Rule may soon undergo a big overhaul that would better defend healthcare data from cybersecurity threats – and require much more from covered entities when it comes to establishing and maintaining defenses....more

FCC Seeks Comments on Updates to CPNI Breach Reporting Rule

Kelley Drye & Warren LLP on 1/25/2023

The Federal Communications Commission (“FCC” or “Commission”) is seeking comments on a Notice of Proposed Rulemaking (NPRM) to refresh its customer proprietary network information (“CPNI”) data breach reporting requirements...more

Cybersecurity Regulation: Key Takeaways From an Unusual FTC Order That Will Follow CEO for a Decade

Farella Braun + Martel LLP on 11/16/2022

The FTC recently issued a proposed order that would settle an enforcement action against Drizly, LLC and its co-founder and CEO, James Rellas, arising from data breaches in 2018 and 2020 that affected over 2.5 million...more

SEC Issued Proposed Rule on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure

Stinson - Government Contracting Matters on 4/22/2022

Increasingly, the Federal government implements a rule for government contractors which then makes its way in some form into all of US industry. Cybersecurity regulations, mandating that government contractors, grant and...more

SEC Proposes Public Company Cybersecurity Disclosure Rules

Stinson LLP on 3/25/2022

On March 9, 2022, the Securities and Exchange Commission (SEC) proposed amendments to its rules that would require certain cybersecurity-related disclosures by public companies. The proposed rules are intended to enhance and...more

Proposed SEC Cybersecurity Rules

Keating Muething & Klekamp PLL on 3/23/2022

On March 9, 2022, the Securities and Exchange Commission (“SEC”) proposed amendments to rules to expand and standardize disclosures regarding cybersecurity risk management, strategy, governance, and incident reporting by...more

SEC Proposes New Rules on Public Company Cybersecurity Disclosures

Mayer Brown Free Writings + Perspectives on 3/15/2022

Background - On March 9, 2022, the U.S. Securities and Exchange Commission (the “SEC”) released proposed amendments (the “Proposed Amendments”) aimed at enhancing and standardizing disclosure relating to cybersecurity...more

DOD Piloting a Private Contractor Vulnerability Disclosure Program

Wiley Rein LLP on 11/4/2020

The U.S. Department of Defense (DOD) continues to pursue innovations in its approach to security vulnerabilities, building on its earlier Hack the Pentagon program and recent moves by the U.S. Department of Homeland Security...more

Entities of All Types Should Consider Commenting on the FTC’s Health Breach Notification Rule by August 20, 2020

Polsinelli on 6/25/2020

On May 22, 2020, the Federal Trade Commission (the “FTC”) published its decennial request for public comment (the “RFC”) on the FTC’s Health Breach Notification Rule (the “HBN Rule”)....more

Report on Patient Privacy Volume 20, Number 6. Privacy Briefs: June 2020

Health Care Compliance Association (HCCA) on 6/16/2020

Report on Patient Privacy 20, no. 6 (June 2020): A divided Indiana Court of Appeals has reinstated a patient’s claim that a hospital is vicariously liable for the actions of a medical assistant who accessed the patient’s...more

Key Takeaways from Our Public Company SEC Reporting Webinar

Bass, Berry & Sims PLC on 12/9/2019

The Bass, Berry & Sims Corporate & Securities Practice Group recently hosted another in a series of complimentary webinars exploring various public company-related securities law issues. The most recent Securities Law...more

Privacy and Data Security Alert | November 2019

Shook, Hardy & Bacon L.L.P. on 11/20/2019

EU Court Allows Class Action to Proceed, Sets Precedent for Future Data Breach Class Actions - A class action brought against Google will be allowed to move forward after the plaintiff’s appeal was permitted, allowing him to...more

Last Chance for Financial Companies to Weigh in On New FTC Data Security Standards

BCLP on 3/18/2019

For the first time in 17 years, the FTC is proposing significant increases to the information security standards which apply to those financial institutions that are regulated by the FTC and are not already subject to similar...more

Deadline Approaching to Submit Comments on Potential Updates to HIPAA in Response to Agency Request for Information

Akin Gump Strauss Hauer & Feld LLP on 1/31/2019

There are less than two weeks left to submit comments regarding potential updates to the privacy, security and breach notification regulations adopted under the Health Insurance Portability and Accountability Act of 1996 and...more

FDA Issues New Draft Cybersecurity Guidance for Medical Devices

Sheppard Mullin Richter & Hampton LLP on 11/30/2018

The Food & Drug Administration has recently released for comment a draft expansion of guidance regarding Content of Premarket Submissions for Management of Cybersecurity in Medical Devices. Although the FDA issued existing...more

Equifax: The Empire State Strikes Back

Patterson Belknap Webb & Tyler LLP on 9/19/2017

Yesterday, New York Governor Andrew M. Cuomo announced that he has directed the Department of Financial Services (DFS) to issue a new regulation requiring “credit reporting agencies to register with” the DFS, as well as...more

NIST Issues Practice Guide for Electric Utilities

Robinson+Cole Data Privacy + Security Insider on 2/27/2017

On February 16, 2017, the National Cybersecurity Center of Excellence released its draft practice guide for electric utilities, entitled “Situational Awareness for Electric Utilities.”...more

NIST Updates Cybersecurity Framework Guidance

Hogan Lovells on 1/26/2017

In the past month, the National Institute of Standards and Technology (NIST) has issued a draft update to its flagship cybersecurity framework as well as new standalone guidance on how organizations can plan to recover from...more

NAIC Released Revised Insurance Data Security Model Law Draft For Review

Robinson+Cole Data Privacy + Security Insider on 9/2/2016

The National Association of Insurance Commissioners (NAIC) Cybersecurity Task Force released a revised draft of the Insurance Data Security Model Law (Model Law) last week. The Model Law’s goal is to “establish exclusive...more

O’ Really, Canada? Data Breach Log Rules Underway

Orrick, Herrington & Sutcliffe LLP on 4/19/2016

In June 2015, Canada made significant amendments to its data privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA). These amendments to PIPEDA will require businesses to inform the Canadian...more

Financial Services Weekly News - September 2015 #4

Goodwin on 9/24/2015

Regulatory Developments - NYDFS Announces Approval of First BitLicense Application from a Virtual Currency Firm: The New York State Department of Financial Services (NYDFS) announced Sept. 22 that it has approved...more

NIST Releases Draft Cybersecurity Practice Guide For Electronic Health Records

King & Spalding on 8/12/2015

On July 22, the National Cybersecurity Center of Excellence (“NCCoE”), a U.S. government organization formed in 2012 within the National Institute of Standards and Technology (“NIST”), released a draft Cybersecurity Practice...more

24 Results

/

View per page

Page: of 1