News & Analysis as of May 5, 2025

Comment Period

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

What’s New – FAR Council Publishes Proposed Rules Concerning CUI and OCIs

White & Case LLP on 2/5/2025

On January 15, 2025, the Federal Acquisition Regulatory Council (FAR Council) proposed two significant rule changes that could reshape compliance obligations for government contractors: one establishing standardized...more

HHS Proposes Significant Updates to HIPAA Security Rule

Ballard Spahr LLP on 1/14/2025

On January 6, 2025, the U.S. Department of Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) published a Notice of Proposed Rulemaking (“NPRM”) to amend the Health Insurance Portability and Accountability Act...more

PEOs Need to Prepare for Increased Cybersecurity Requirements Thanks to Proposed HIPAA Security Rule Revisions

Fisher Phillips on 1/8/2025

With the HIPAA Security Rule set to undergo a massive overhaul to boost cybersecurity protections, PEOs need to take note. After all, as stewards of worksite employee and client company data – and as sponsors of group health...more

Proposed Updates to HIPAA Security Rule Would Require Entities to Adopt Enhanced Cybersecurity Measures

Fisher Phillips on 1/7/2025

The HIPAA Security Rule may soon undergo a big overhaul that would better defend healthcare data from cybersecurity threats – and require much more from covered entities when it comes to establishing and maintaining defenses....more

DOJ’s Notice of Proposed Rulemaking on Sensitive Personal Data and Government-Related Data

Perkins Coie on 12/4/2024

In October 2024, the U.S. Department of Justice (DOJ) issued a 420-page Notice of Proposed Rulemaking (NPRM) to implement Executive Order (EO) 14117, which directed DOJ to issue implementing regulations and directed the U.S....more

Security Snippets: NIST publishes guide on due diligence for cyber supply chain risk management

Hogan Lovells on 11/8/2024

NIST’s “quick-start guide” is designed to assist acquirers as they evaluate the various risks across their network of suppliers, focusing on supply chain tiers, foreign ownership, control or influence (FOCI), provenance,...more

Are We There Yet? DoD Issues Final Rule Establishing CMMC Program

McDermott Will & Emery on 10/17/2024

The US Department of Defense (DoD) published a final rule codifying the Cybersecurity Maturity Model Certification (CMMC) Program. The final CMMC rule will apply to all DoD contractors and subcontractors that will process,...more

Nevada Gaming Control Board Workshop on Public Regulation

Womble Bond Dickinson on 5/13/2024

The Nevada Gaming Control Board (“Board”) will hold a workshop on May 23, 2024, to solicit comments on proposed amendments to Nevada Gaming Commission (“NGC”) Regulations regarding, without limitation, Regulations 5, 7A, 8,...more

Deadline to Comment on Proposed Rules Impacting Infrastructure as a Service Providers Approaching

Foley Hoag LLP - Security, Privacy and the... on 4/4/2024

On January 29, 2024, BIS proposed a rule that would impose new requirements for U.S. providers of Infrastructure as a Service (“IaaS”) products and their foreign resellers. The proposed rule would require U.S. IaaS providers...more

Proposed Federal Cyber Incident Reporting Rule Adds Hefty Federal Reporting Requirements to Critical Infrastructure Sector and...

Woods Rogers on 3/28/2024

The federal Cybersecurity and Infrastructure Security Agency (CISA) released a draft of its proposed rule detailing how covered entities operating in critical infrastructure sectors report cyberattacks and ransomware payments...more

Two New Cybersecurity Proposed Rules Mean Big Changes for Federal Contractors

Sheppard Mullin Richter & Hampton LLP on 10/5/2023

On October 3, 2023, the FAR Council released two long-awaited proposed rules for federal contractor cybersecurity stemming from the Biden Administration’s Cybersecurity Executive Order from May 2021 (Executive Order 14028)....more

The Invitation to Streamline Cybersecurity Regulations

Husch Blackwell LLP on 9/27/2023

Keypoint: To advance the National Cybersecurity Strategy, the Office of the National Cyber Director is soliciting public comments to harmonize cybersecurity regulations, with comments due by October 31, 2023. In March 2023,...more

NIST updates its Cybersecurity Framework

Orrick, Herrington & Sutcliffe LLP on 8/28/2023

The National Institute of Standards and Technology (NIST) recently unveiled a proposed update to its Cybersecurity Framework, which was originally developed to provide information security guidelines for “critical...more

NYDFS’ Proposed Amendment to Part 500 Includes Important Changes to Cybersecurity Regulations

Blank Rome LLP on 12/28/2022

The New York Department of Financial Services (“NYDFS”) released its proposed second amendment to its Cybersecurity Requirements for Financial Services Companies (“Part 500”), which includes heightened cybersecurity...more

NYDFS Publishes Proposed Amendment to Its Cybersecurity Rules for Financial Services Companies

Morgan Lewis - Tech & Sourcing on 12/9/2022

The New York Department of Financial Services (NYDFS) published its proposed amendment to its 23 NYCRR Part 500 (Cybersecurity Rules) on November 9, 2022, following the release of the draft version on July 29, 2022....more

New York Department of Financial Services Publishes Proposed Second Amendment to Its Cybersecurity Regulation

BakerHostetler on 11/18/2022

On Nov. 9, 2022, the New York State Department of Financial Services (NYDFS) published a proposed second amendment to its cybersecurity regulation. This follows its pre-proposed amendment that was published on July 29. ...more

Cybersecurity Regulation: Key Takeaways From an Unusual FTC Order That Will Follow CEO for a Decade

Farella Braun + Martel LLP on 11/16/2022

The FTC recently issued a proposed order that would settle an enforcement action against Drizly, LLC and its co-founder and CEO, James Rellas, arising from data breaches in 2018 and 2020 that affected over 2.5 million...more

Flood Insurance for Cyberattacks? A Federal Proposal

Morgan Lewis - Tech & Sourcing on 11/14/2022

The US Treasury Department has issued a request for public comment on a federal cyberinsurance program that would aim to cover the costs associated with severe cyberattacks. The Federal Insurance Office (FIO) and the US...more

SEC Reopening Comments After Technical Issues

Alston & Bird on 10/17/2022

The Securities and Exchange Commission has reopened comments for nearly two dozen proposed rules and other matters. Our Securities Group details the list that includes some controversial rules about cybersecurity, SPACs, and...more

A Second Chance: The SEC Reopens Comment Periods on Climate, Cyber and Other Rule Proposals in Response to Technical Glitch

Vinson & Elkins LLP on 10/11/2022

A technological error in the online comment portal on sec.gov has prevented the Securities and Exchange Commission (“SEC”) from receiving comments on twelve rule proposals (the “Affected Proposals”), according to a new SEC...more

85 Results

View per page

Page: of 4

Cybersecurity › Public Comment › Comment Period

What’s New – FAR Council Publishes Proposed Rules Concerning CUI and OCIs

HHS Proposes Significant Updates to HIPAA Security Rule

PEOs Need to Prepare for Increased Cybersecurity Requirements Thanks to Proposed HIPAA Security Rule Revisions

Proposed Updates to HIPAA Security Rule Would Require Entities to Adopt Enhanced Cybersecurity Measures

DOJ’s Notice of Proposed Rulemaking on Sensitive Personal Data and Government-Related Data

Security Snippets: NIST publishes guide on due diligence for cyber supply chain risk management

Are We There Yet? DoD Issues Final Rule Establishing CMMC Program

Nevada Gaming Control Board Workshop on Public Regulation

Deadline to Comment on Proposed Rules Impacting Infrastructure as a Service Providers Approaching

Proposed Federal Cyber Incident Reporting Rule Adds Hefty Federal Reporting Requirements to Critical Infrastructure Sector and...

Two New Cybersecurity Proposed Rules Mean Big Changes for Federal Contractors

The Invitation to Streamline Cybersecurity Regulations

NIST updates its Cybersecurity Framework

NYDFS’ Proposed Amendment to Part 500 Includes Important Changes to Cybersecurity Regulations

NYDFS Publishes Proposed Amendment to Its Cybersecurity Rules for Financial Services Companies

New York Department of Financial Services Publishes Proposed Second Amendment to Its Cybersecurity Regulation

Cybersecurity Regulation: Key Takeaways From an Unusual FTC Order That Will Follow CEO for a Decade

Flood Insurance for Cyberattacks? A Federal Proposal

SEC Reopening Comments After Technical Issues

A Second Chance: The SEC Reopens Comment Periods on Climate, Cyber and Other Rule Proposals in Response to Technical Glitch

SEC Reopens Comment Periods for Certain Rulemaking Releases

SEC Releases Draft Strategic Plan for Fiscal Years 2022 to 2026

SEC Proposes Mandatory Cybersecurity Disclosures by Public Companies

SEC Proposes New Rules on Cybersecurity Disclosures: Four Things to Know

SEC proposes significant new cybersecurity disclosure requirements

Cybersecurity › Public Comment › Comment Period

"My best business intelligence, in one easy email…"