News & Analysis as of May 6, 2025

European Union

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

Countdown to DORA – Four Takeaway Points From Regulators’ December Statements

Skadden, Arps, Slate, Meagher & Flom LLP on 1/6/2025

The EU’s Digital Operational Resilience Act (DORA) becomes binding on 17 January 2025. As the compliance deadline approaches, EU financial regulators (ESAs) have issued a flurry of statements on the act, including: - An...more

EU DORA: Are you in scope, and if so, how can you prepare?

King & Spalding on 12/23/2024

The Digital Operational Resilience Act (DORA) establishes a harmonised and comprehensive framework for information and communication technology (ICT) risk management in the financial sector. It is a directly applicable EU...more

EU Cyber Legislation Puts Emphasis on Board Responsibility

Mayer Brown on 3/8/2024

What is a Management Body? Under both DORA and NIS2, a management body can be a body with managerial and/or supervisory functions. The powers and structure of management bodies vary within the EU Member State, and managerial...more

Companies Have Until March to Comment on EDPB Data Breach Notification Guidelines

Sheppard Mullin Richter & Hampton LLP on 2/1/2021

Many supervisory authorities across Europe have reported increasing numbers of data breach notifications since the introduction of GDPR. While most companies are now familiar with the 72-hour reporting obligation for...more

Nowhere To Hide: Controllers have “Constructive Awareness” Of Processor Data Breaches

Goodwin on 1/20/2021

On December 15, 2020, Ireland’s Data Protection Commission (“DPC”) announced its decision to fine Twitter International Company (“Twitter”) €450,000 for failing to notify the DPC promptly of a data breach affecting EU...more

New law decreases the number of companies required to designate a Data Protection Officer in Germany

Orrick, Herrington & Sutcliffe LLP on 7/3/2019

On June 28, 2019, the German parliament (Bundestag) passed new legislation imposing several changes to the current German Federal Data Protection Act (“BDSG”). Although many of the changes addressed privacy aspects of...more

U.S. hospitals will continue to grapple with GDPR compliance in 2019

Bricker Graydon LLP on 1/10/2019

When the European Union’s General Data Protection Regulation (GDPR) became effective on May 25, 2018, many US-based hospitals struggled to determine whether they were subject to the GDPR and, if so, what they must do to...more

Key Steps to GDPR Compliance for U.S. Companies (Part 3)

Schwabe, Williamson & Wyatt PC on 5/25/2018

Although the GDPR comes into effect on May 25, 2018, the breadth of its reach will continue to develop long after its effective date. Domestic companies should be aware that the rules will likely change over time. While this...more

Countdown to GDPR: Policies and Procedures

Thomas Fox - Compliance Evangelist on 3/7/2018

Today we are going to take a look at some of the basic policies and procedures that you need to have in place to comply with the new General Data Protection Regulation (GDPR) effective May 2018. I am joined in the exploration...more

SEC Issues New Cybersecurity Guidance; Makes Clear that Cybersecurity Disclosures Are Part of Existing SEC Requirements - Guidance...

Holland & Knight LLP on 2/26/2018

On Feb. 21, 2018, the Securities and Exchange Commission (SEC) issued interpretive guidance on its expectations for corporate disclosures on cybersecurity risks. The guidance delineates where it believes existing SEC rules...more

European Businesses Offering Payment Services Told How to Manage Operational and Security Risks

Pillsbury Winthrop Shaw Pittman LLP on 1/29/2018

Payment service providers operating in the EU must take note of new risk management requirements from the European Banking Authority. The European Banking Authority’s operational and risk management guidelines apply to all...more

Privacy & Cybersecurity Update - September 2015

Skadden, Arps, Slate, Meagher & Flom LLP on 10/1/2015

Adviser to European Court of Justice Says US-EU Safe Harbor Should Be Declared Invalid - An advisory opinion issued by the advocate general to the European Court of Justice states that the U.S.-EU Safe Harbor should be...more

12 Results

View per page

Page: of 1

Cybersecurity › Policies and Procedures › European Union

"My best business intelligence, in one easy email…"