News & Analysis as of May 5, 2025

Cybersecurity › Data Protection › Comment Period

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

Top 10 takeaways from the new HIPAA security rule NPRM

Bradley Arant Boult Cummings LLP on 3/20/2025

On Jan. 6, 2025, the U.S. Department of Health and Human Services (HHS) proposed new regulations to enhance cybersecurity protections for electronic protected health information (ePHI) under the Health Insurance Portability...more

CPPA extends comment period for regulations to mid-February 2025

Orrick, Herrington & Sutcliffe LLP on 1/27/2025

On January 16, the California Privacy Protection Agency extended the public comment period for its proposed rulemaking package to February 19 due to wildfires affecting the state....more

Proposed Update to the HIPAA Security Rule

Vorys, Sater, Seymour and Pease LLP on 1/24/2025

In early January, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) published a Notice of Proposed Rulemaking. The Proposed Rule would modify the Security Standards for the Protection of...more

Proposed HIPAA Security Rule Updates — Implications for Covered Entities and Their Information Security Programs

Faegre Drinker Biddle & Reath LLP on 1/23/2025

On January 6, 2025, the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) published a notice of proposed rulemaking (Proposed Rule) updating the Health Insurance Portability and...more

PEOs Need to Prepare for Increased Cybersecurity Requirements Thanks to Proposed HIPAA Security Rule Revisions

Fisher Phillips on 1/8/2025

With the HIPAA Security Rule set to undergo a massive overhaul to boost cybersecurity protections, PEOs need to take note. After all, as stewards of worksite employee and client company data – and as sponsors of group health...more

Proposed Updates to HIPAA Security Rule Would Require Entities to Adopt Enhanced Cybersecurity Measures

Fisher Phillips on 1/7/2025

The HIPAA Security Rule may soon undergo a big overhaul that would better defend healthcare data from cybersecurity threats – and require much more from covered entities when it comes to establishing and maintaining defenses....more

California agency proposes updates to consumer privacy regulations

Orrick, Herrington & Sutcliffe LLP on 12/10/2024

On November 22, the California Privacy Protection Agency (the Agency) published its NPRM proposing amendments to existing regulations under the California Consumer Privacy Act (CCPA). These changes aim to enhance state...more

California Regulator Opens Comment Period for Latest Round of Privacy Regulations

Katten Muchin Rosenman LLP on 11/26/2024

On November 22, 2024, the California Privacy Protection Agency (CPPA) opened the formal public comment period for its latest proposed rulemaking package. The package includes updates to existing regulations and proposed...more

Department of Homeland Security Proposes Rule for Reporting of Cyber Incidents

King & Spalding on 4/19/2024

On April 4, 2024, the Cybersecurity and Infrastructure Security Agency (“CISA”) published for public comment a long-awaited proposed rule to implement the Cyber Incident Reporting for Critical Infrastructure Act of 2022...more

FTC Seeks to Strengthen Privacy Protections of Children Online

Jones Day on 12/28/2023

On December 20, 2023, the Federal Trade Commission ("FTC") announced a Notice of Proposed Rulemaking ("NPRM") to revise the Children's Online Privacy Protection Act ("COPPA") Rule to reduce the amount of information...more

CPPA Proposes More Revisions to CCPA

Robinson+Cole Data Privacy + Security Insider on 12/27/2023

The California Privacy Protection Agency (CPPA) recently met to discuss automated decision-making technology, privacy risk assessments and cybersecurity audits under the California Consumer Privacy Act (CCPA) as amended by...more

Two New Cybersecurity Proposed Rules Mean Big Changes for Federal Contractors

Sheppard Mullin Richter & Hampton LLP on 10/5/2023

On October 3, 2023, the FAR Council released two long-awaited proposed rules for federal contractor cybersecurity stemming from the Biden Administration’s Cybersecurity Executive Order from May 2021 (Executive Order 14028)....more

What’s in a Label? FCC Begins Rulemaking Procedure for Cybersecurity Labeling on IoT Devices

Venable LLP on 9/5/2023

Cybersecurity and data protection is front and center on the Federal Communications Commission’s (FCC) agenda. The latest manifestation of this is the FCC’s issuance of a Notice of Proposed Rulemaking (NPRM) on August 25,...more

NIST Issues Cybersecurity Framework 2.0 for public comment

Constangy, Brooks, Smith & Prophete, LLP on 8/28/2023

In early August, the National Institute of Standards and Technology released the initial public draft of its Cybersecurity Framework 2.0. The draft is a long-awaited update to a framework that’s been in place for almost 10...more

Silver Lining for Cos. in Proposed Calif. Privacy Law Changes

Troutman Pepper Locke on 2/23/2023

On Oct. 17 and again on Nov. 3, the California Privacy Protection Agency, or CPPA, modified the text of the proposed regulations implementing the California Privacy Rights Act, or CPRA. Originally published in Law360 on...more

CPPA Approves Final CPRA Regulations, Invites Comments on Future Rulemaking Topics

Akin Gump Strauss Hauer & Feld LLP on 2/22/2023

On February 10, 2023, the California Privacy Protection Agency (CPPA) issued an invitation for public commentary on the topics that will be included in their future rulemaking: cybersecurity audits, risk assessments and...more

Colorado AG Updates Draft Rules for Colorado Privacy Act

Robinson+Cole Data Privacy + Security Insider on 1/6/2023

Colorado Attorney General Phil Weiser’s office recently published an updated version of the draft rules governing the Colorado Privacy Act, which goes into effect on July 1, 2023. The updates build upon the original draft...more

Colorado Releases Revised Privacy Rules

Ballard Spahr LLP on 12/22/2022

On December 21, the Colorado Attorney General released a revised draft of the Colorado Privacy Act Rules....more

NYDFS Publishes Proposed Amendment to Its Cybersecurity Rules for Financial Services Companies

Morgan Lewis - Tech & Sourcing on 12/9/2022

The New York Department of Financial Services (NYDFS) published its proposed amendment to its 23 NYCRR Part 500 (Cybersecurity Rules) on November 9, 2022, following the release of the draft version on July 29, 2022....more

Cybersecurity Regulation: Key Takeaways From an Unusual FTC Order That Will Follow CEO for a Decade

Farella Braun + Martel LLP on 11/16/2022

The FTC recently issued a proposed order that would settle an enforcement action against Drizly, LLC and its co-founder and CEO, James Rellas, arising from data breaches in 2018 and 2020 that affected over 2.5 million...more

Comment Period Commences for New CPRA Modified Regulations

Akin Gump Strauss Hauer & Feld LLP on 11/9/2022

On November 3, 2022, the California Privacy Protection Agency (CPPA) officially published modifications to the proposed regulations implementing the Consumer Privacy Rights Act (CPRA). These modified proposed regulations...more

Colorado AG Publishes Draft Privacy Rules

Ballard Spahr LLP on 10/3/2022

On October 1, 2022, the Colorado Attorney General‘s Office announced that it had submitted the first draft of its Rules implementing the Colorado Privacy Act....more

Department of Health and Human Services Issues Request for Information on Cybersecurity Standards

Proskauer on Privacy on 5/6/2022

The Department of Health and Human Services (“HHS”) has issued a formal request for information from the public about how regulated entities are implementing industry recognized security practices. The request for information...more

SEC Issued Proposed Rule on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure

Stinson - Government Contracting Matters on 4/22/2022

Increasingly, the Federal government implements a rule for government contractors which then makes its way in some form into all of US industry. Cybersecurity regulations, mandating that government contractors, grant and...more

SEC Proposes Public Company Cybersecurity Disclosure Rules

Stinson LLP on 3/25/2022

On March 9, 2022, the Securities and Exchange Commission (SEC) proposed amendments to its rules that would require certain cybersecurity-related disclosures by public companies. The proposed rules are intended to enhance and...more

86 Results

/

View per page

Page: of 4

Next »