News & Analysis as of May 8, 2025

Cybersecurity › Enforcement › Cyber Incident Reporting

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

2024 SEC Cybersecurity Rule Updates

BakerHostetler on 1/7/2025

The first year of a new significant regulatory obligation is often more notable for the absence of regulatory enforcement actions as regulators often observe compliance efforts and challenges, offer guidance, and look for...more

EU DORA: Are you in scope, and if so, how can you prepare?

King & Spalding on 12/23/2024

The Digital Operational Resilience Act (DORA) establishes a harmonised and comprehensive framework for information and communication technology (ICT) risk management in the financial sector. It is a directly applicable EU...more

Proposed Cybersecurity Regulation Uncertain Under Trump Administration

Vinson & Elkins LLP on 12/5/2024

Proposed cybersecurity regulation may face changes or challenges in view of the incoming Trump administration that is intent on reducing the perceived regulatory burden on American companies and streamlining government...more

Hospital Administrators – Is Your Hospital Cyber-Secure?

Lippes Mathias LLP on 11/20/2024

On October 2, 2024, New York adopted new regulations requiring general hospitals to implement heightened cybersecurity safeguards. General hospitals, as defined in Article 28 of the NY Public Health Law, generally must begin...more

Client Alert: The SEC’s Approach to Cybersecurity Disclosure Decisions

Jenner & Block on 6/27/2024

The SEC’s Director of Corporation Finance, Erik Gerding, recently issued two statements regarding a public company’s disclosure obligations in response to a cybersecurity incident. These remarks follow the adoption of the...more

SEC Clarifies Reporting of Material vs. Immaterial Cybersecurity Incidents

Davis Wright Tremaine LLP on 6/3/2024

The U.S. Securities and Exchange Commission's (SEC) Division of Corporate Finance (Division) published a statement on May 21, 2024, regarding how public companies may disclose cyber incidents they determined to be immaterial....more

Cybersecurity Continues to be a Focal Point for Regulators in 2024

Proskauer - The Capital Commitment on 4/18/2024

The SEC’s new and proposed rules on cybersecurity and cyber-incident reporting will have a dual impact on private investment advisers and funds. First, the proposal by the SEC will impose cybersecurity related...more

CISA Publishes Proposed Rule for Cyber Reporting

Bass, Berry & Sims PLC on 4/11/2024

On April 4, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) published its much-anticipated Notice of Proposed Rule Making for the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA)....more

Client Alert: CISA Announces Proposed Cyber Incident Reporting Rule

Jenner & Block on 4/3/2024

On March 27, 2024, the Cybersecurity and Infrastructure Security Agency (CISA), an operational component of the Department of Homeland Security (DHS), posted for public inspection its long-anticipated notice of proposed...more

Network Topology and Mapping: Cornerstones of Data Security – Part 1

Bradley Arant Boult Cummings LLP on 11/30/2023

Data security is a top concern for organizations in today’s digital landscape. It protects data from unauthorized access, use, modification, or disclosure, and requires implementing technical, administrative, and physical...more

A New Frontier for SEC Cybersecurity Enforcement? The SEC Charges SolarWinds and its CISO with Securities Fraud

Morrison & Foerster LLP on 11/6/2023

Earlier this week, the SEC accused SolarWinds Corporation (“SolarWinds” or the “Company”) and its Chief Information Security Officer (“CISO”) of committing scienter-based securities fraud, among other violations, for...more

Remarks of SEC Enforcement Director on Cyber Resilience

WilmerHale on 7/7/2023

On June 22, 2023, Gurbir S. Grewal, Director of the SEC’s Division of Enforcement, spoke on the topic of cyber resilience at the Financial Times Cyber Resilience Summit. Director Grewal defined cyber resilience as a guiding...more

Cybersecurity Enforcement Has Increased, and 2023 Will Be Worse!

Bradley Arant Boult Cummings LLP on 3/7/2023

The government’s announcement of renewed emphasis on cybersecurity enforcement has spawned recent million-dollar enforcement actions. Continued government attention on cybersecurity promises a treacherous enforcement...more

European Digital Compliance: Key Digital Regulation & Compliance Developments - January 2023

Morrison & Foerster LLP on 1/10/2023

To help organizations stay on top of the main developments in European digital compliance, Morrison Foerster’s European Digital Regulatory Compliance team reports on some of the main topical digital regulatory and compliance...more

HHS Office for Civil Rights Posts HIPAA Security Rule Security Incident Procedures

Foley Hoag LLP - Security, Privacy and the... on 10/26/2022

Every October, in recognition of National Cybersecurity Awareness Month, the federal government and its partners work to educate stakeholders on cybersecurity awareness and how best to protect the privacy and security of...more

Cyber Incident Reporting for Critical Infrastructure Act - What Companies Need to Know Now

BCLP on 7/1/2022

The Cyber Incident Reporting for Critical Infrastructure Act (“CIRCIA” or “the Act”) is a new federal law, adopted in March 2022, which requires critical infrastructure entities to report certain cybersecurity incidents and...more

New Legislation Will Require Critical Sector Entities to Report Certain Cyber Incidents

Baker Donelson on 3/22/2022

On March 15, 2022, President Biden signed into law the Cyber Incident Reporting for Critical Infrastructure Act (the Act) as part of the Consolidated Appropriations Act of 2022. The Act requires "critical sector" entities to...more

Contractual Considerations for Self-Funded Group Health Plan Sponsors in 2022

Perkins Coie on 3/15/2022

In our January 2022 update, we discussed new federal requirements that group health plans should pay close attention to in 2022. The sponsor of a self-funded plan will need to work closely with its legal counsel, benefits...more

[Event] Privacy and Cybersecurity KnowledgeShare – September 19th, London, UK

Hogan Lovells on 7/23/2019

Join us on Thursday 19 September for the Hogan Lovells Privacy and Cybersecurity KnowledgeShare in London. We will share our latest thinking on the key privacy and cybersecurity issues faced by those with data protection...more

19 Results

/

View per page

Page: of 1