News & Analysis as of May 5, 2025

Cybersecurity › Data Protection › New Guidance

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

DOJ’s Latest Guidance on the Data Security Program – What’s New?

Troutman Pepper Locke on 4/17/2025

The new Department of Justice (DOJ) Data Security Program (DSP) took effect on April 8....more

CFTC Issues Advisory Guidance For Anticipated Growth In Use Of Artificial Intelligence By Regulated Entities

A&O Shearman on 12/17/2024

On December 5, 2024, the Divisions of Clearing and Risk, Data, Market Oversight, and Market Participants of the Commodity Futures Trading Commission (“CFTC”) issued an advisory on the use of artificial intelligence (“AI”) in...more

The Department of Labor’s Expanded Cybersecurity Guidance: What ERISA Plan Sponsors and Fiduciaries Need to Know

Seyfarth Shaw LLP on 11/11/2024

On September 6, 2024, the U.S. Department of Labor (DOL) issued Compliance Assistance Release No. 2024-01, titled “Cybersecurity Guidance Update.” The updated guidance clarifies that the DOL cybersecurity guidance applies to...more

CISA Warns of Three New Vulnerabilities Actively Exploited by Threat Actors

Robinson+Cole Data Privacy + Security Insider on 7/18/2024

On July 17, 2024, the Cybersecurity & Infrastructure Security Agency (CISA) issued an Alert adding three vulnerabilities to its Known Vulnerabilities Catalog. ...more

EDPB Provides Guidance On Determining A 'Main Establishment' And The 'One-Stop-Shop' Mechanism

Mayer Brown on 2/29/2024

The opinion was issued in response to a request by the French Data Protection Authority and provides guidance on the conditions for determining a controller's main establishment where that controller has establishments in...more

HHS Releases Cybersecurity Performance Goals for Healthcare Organizations

Bass, Berry & Sims PLC on 1/30/2024

In response to the number of successful, large-scale ransomware attacks affecting healthcare organizations nearly tripling since 2018, the Department of Health and Human Services (HHS) has released guidance outlining its...more

Guidance from European Data Protection Board Requires Consent for Tracking

Dorsey & Whitney LLP on 12/28/2023

The European Data Protection Board (EDPB), a board comprised primarily of representatives of the data protection supervisory authorities of the European Union’s member states, issued surprising new guidance in mid-November...more

Cyber security – Pensions Regulator publishes updated guidance for trustees

Mayer Brown on 12/22/2023

With the pensions industry having direct experience of recent cyber security incidents, the Pensions Regulator (TPR) has updated its guidance for trustees in this area. As a reminder, this year saw Capita suffer a cyber...more

Pensions: what's new this week - 11 September 2023

A&O Shearman on 9/12/2023

Welcome to your weekly update from the Allen & Overy Pensions team, covering all the latest legal and regulatory developments in the world of workplace pensions. This week we cover the following topics: HMRC Pensions Tax...more

SEC adopts new cybersecurity rules for public companies

McAfee & Taft on 8/1/2023

The Securities and Exchange Commission (SEC) finalized cybersecurity rules this week for public companies centered on disclosure requirements for material cybersecurity incidents, as well as periodic reporting regarding...more

China Issues Guidance on Filing of the Standard Contract for Cross-Border Transfers of Personal Information

Jones Day on 6/9/2023

On May 30, 2023, the Cyberspace Administration of China ("CAC") issued the "Guidance on Filing the Standard Contract for the Cross-Border Transfer of Personal Information" ("Guidance"), which took effect on June 1, 2023....more

Reviewing Online Tracking Technologies Could Keep HIPAA-Regulated Entities Out of Hot Water

Woods Rogers on 4/4/2023

A patient surfs a hospital system’s website and reads an article about depression and anxiety. The patient then searches the hospital’s website for mental health providers in the area. A few hours later, the patient logs into...more

HHS releases health care cybersecurity guide

Orrick, Herrington & Sutcliffe LLP on 3/24/2023

On March 8, the Department of Health and Human Services (HHS) released a cybersecurity implementation guide to assist public and private health care sectors prevent cybersecurity incidents. The Cybersecurity Framework...more

It’s Here – The New National Cybersecurity Strategy

Polsinelli on 3/2/2023

Today, after months of rumors regarding its release and contents, the White House issued its National Cybersecurity Strategy “to secure the full benefits of a safe and secure digital ecosystem.” The full strategy is 39 pages...more

New requirements for outbound data transfers from China

White & Case LLP on 2/1/2023

The Cybersecurity Administration of China (the "CAC") has published guidelines concerning outbound data transfers of personal information and "important data" from China to other jurisdictions. Businesses must comply with...more

FBI + CISA Warn Companies (Especially Health Care) About Zeppelin Ransomware

Robinson+Cole Data Privacy + Security Insider on 8/22/2022

The FBI and CISA recently issued a Cybersecurity Alert entitled “#StopRansomware: Zeppelin Ransomware” providing an alert to organizations about the proliferation of Zeppelin ransomware attacks and information on the...more

DOJ Revises CFAA Charging Policy to Provide Clarity for Cybersecurity Research and Terms of Use

Jenner & Block on 6/2/2022

On May 19, 2022, the Department of Justice (DOJ) issued revisions to its existing policy for charging offenses under the Computer Fraud and Abuse Act (CFAA) (2022 CFAA Policy). The revisions state that “good-faith” security...more

Data Privacy + Cybersecurity Insider - May 2022 #2

Robinson & Cole LLP on 5/13/2022

CYBERSECURITY NIST - Releases Guidance on Supply Chain Security - The National Institute of Standards and Technology (NIST) Information Technology Laboratory recently released guidance entitled “Software Supply Chain...more

NIST Releases Guidance on Supply Chain Security

Robinson+Cole Data Privacy + Security Insider on 5/12/2022

The National Institutes of Science and Technology (NIST) Information Technology Laboratory recently released guidance entitled “Software Supply Chain Security Guidance,” in response to directives set forth in President...more

Ignore Evolving Security Threats at Your Own Risk: OCR Raises Stakes on Cybersecurity in the Health Care Sector

Wyrick Robbins Yates & Ponton LLP on 4/7/2022

OCR’s recent focus on cybersecurity in the health care sector sends a clear message to HIPAA covered entities and business associates: OCR expects you to implement security measures that address known threats to ePHI that are...more

Federal Banking Regulators Issue New Guidance for Complying with 36 Hour Cybersecurity Incident Reporting Requirement

Polsinelli on 4/1/2022

On March 29, 2022, federal banking regulators issued important guidance for how banking organizations can comply with the upcoming requirement to notify regulators within 36 hours of ransomware or other disruptive...more

FINRA Urges Firms to Heed CISA/FBI “Shields Up” Warning on Russia

Burr & Forman on 2/17/2022

The regular “Weekly Update” email from the Financial Industry Regulatory Authority (“FINRA”) had an eye-catching warning February 16, urging broker-dealer member firms to heed the “Shields Up” cyber threat warning from the...more

2021 Data Privacy Overview: New Regulations and Guidance

Lighthouse on 1/12/2022

While everyone hoped that 2021 would be less tumultuous than 2020, it certainly did not turn out that way in the end. The same was true in the world of data privacy – with sweeping new data protection regulations and guidance...more

Privacy & Cybersecurity Update - December 2021

Skadden, Arps, Slate, Meagher & Flom LLP on 1/4/2022

In this month’s Privacy & Cybersecurity Update, we review the TSA’s new cybersecurity requirements for critical U.S. infrastructure, the White House OMB’s new guidance on cyber incident reporting procedures and the U.S.-U.K....more

CISA Issues Guidance on Protecting Organizations’ Social Media Accounts

Robinson+Cole Data Privacy + Security Insider on 12/17/2021

The Cybersecurity and Infrastructure Security Agency (CISA) recently issued guidance on protecting the security of organizations’ social media accounts to reduce the risk of unauthorized access to those accounts....more

83 Results

/

View per page

Page: of 4

Next »