News & Analysis as of May 6, 2025

Risk Management

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

White House Seeks Public Input on AI Action Plan

Pillsbury Winthrop Shaw Pittman LLP on 2/14/2025

The White House is gathering industry feedback on AI governance, giving stakeholders an opportunity to shape future policy....more

What’s New – FAR Council Publishes Proposed Rules Concerning CUI and OCIs

White & Case LLP on 2/5/2025

On January 15, 2025, the Federal Acquisition Regulatory Council (FAR Council) proposed two significant rule changes that could reshape compliance obligations for government contractors: one establishing standardized...more

HHS OCR Releases Proposed Updates to HIPAA Security Rule

Paul Hastings LLP on 1/23/2025

On December 27, 2024, the U.S. Department of Health and Human Services (HHS), through the Office for Civil Rights (OCR), announced a Notice of Proposed Rulemaking (NPRM) to amend the Security Standards for the Protection of...more

HHS Proposes Significant Updates to HIPAA Security Rule

Ballard Spahr LLP on 1/14/2025

On January 6, 2025, the U.S. Department of Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) published a Notice of Proposed Rulemaking (“NPRM”) to amend the Health Insurance Portability and Accountability Act...more

Proposed Updates to HIPAA Security Rule Would Require Entities to Adopt Enhanced Cybersecurity Measures

Fisher Phillips on 1/7/2025

The HIPAA Security Rule may soon undergo a big overhaul that would better defend healthcare data from cybersecurity threats – and require much more from covered entities when it comes to establishing and maintaining defenses....more

CFTC Issues Advisory Guidance For Anticipated Growth In Use Of Artificial Intelligence By Regulated Entities

A&O Shearman on 12/17/2024

On December 5, 2024, the Divisions of Clearing and Risk, Data, Market Oversight, and Market Participants of the Commodity Futures Trading Commission (“CFTC”) issued an advisory on the use of artificial intelligence (“AI”) in...more

SEC Advances Three Cybersecurity Rule Proposals to Public Comment

Jones Day on 3/23/2023

If adopted, these proposed rules would (i) enhance protection of customer information under Regulation S-P, (ii) add new requirements addressing cybersecurity risk to the U.S. securities markets, and (iii) expand the types of...more

NYDFS Publishes Proposed Amendment to Its Cybersecurity Rules for Financial Services Companies

Morgan Lewis - Tech & Sourcing on 12/9/2022

The New York Department of Financial Services (NYDFS) published its proposed amendment to its 23 NYCRR Part 500 (Cybersecurity Rules) on November 9, 2022, following the release of the draft version on July 29, 2022....more

SEC proposes significant new cybersecurity disclosure requirements

Hogan Lovells on 3/25/2022

On March 9, 2022 the SEC proposed rule amendments that would require public companies to report detailed information about material cybersecurity incidents affecting their business and about their cybersecurity risk...more

Prepare, Report, Record: SEC Proposes New Cybersecurity Requirements for Investment Advisers and Funds

Fenwick & West LLP on 2/18/2022

In the latest move by a regulator aimed at bolstering cyber defenses, on February 9, 2022, the U.S. Securities and Exchange Commission voted to propose new rules to address the cybersecurity risks faced by registered...more

SEC Proposes Changes to Private Fund Regulation

Goodwin on 2/11/2022

In This Issue. The U.S. Securities and Exchange Commission (SEC) proposed changes to private fund regulation; the Office of the Comptroller of the Currency (OCC) succeeded in validating its “valid-when-made” rulemaking; the...more

FDIC Seeks Comment on Supervisory Approach to Examinations During Pandemic

Goodwin on 8/20/2021

In This Issue. The Federal Deposit Insurance Corporation (FDIC) is seeking information and comment regarding the FDIC’s supervisory approach to examinations during the pandemic; the FDIC’s tech lab, FIDTECH, announced a “tech...more

Achieving Industry Standards

Stoel Rives - Global Privacy & Security Blog® on 10/29/2019

For Cybersecurity and Privacy, “What Are the Industry Standards? Are We Meeting Them?” These are questions the FTC Chairman, Joseph Simons, strongly suggested a CEO must ask before a data breach occurs to avoid the...more

NIST Unveils IoT Baseline of Core Cybersecurity Features for Comment

Faegre Drinker Biddle & Reath LLP on 8/21/2019

In a release aptly labeled “A Starting Point for IoT Device Manufacturers” the National Institute of Standards and Technology (NIST), an arm of the Department of Commerce, recently added to the discussion with the...more

FDA Issues New Draft Cybersecurity Guidance for Medical Devices

Sheppard Mullin Richter & Hampton LLP on 11/30/2018

The Food & Drug Administration has recently released for comment a draft expansion of guidance regarding Content of Premarket Submissions for Management of Cybersecurity in Medical Devices. Although the FDA issued existing...more

October Is National Cyber Security Awareness Month: NTIA Requests Comment on a Proposed Risk-Management Approach to Consumer Data...

Mintz - Privacy & Cybersecurity Viewpoints on 10/1/2018

Welcome to October! October 2018 marks the 15th year of the observance of National Cyber Security Awareness Month, a joint effort of the U.S. Department of Homeland Security and the National Cyber Security Awareness Alliance....more

Federal Regulators Unveil Proposed Cybersecurity Standards for Large Financial Firms

Bracewell LLP on 11/21/2016

On October 19, 2016, federal regulators issued an Advance Notice of Proposed Rulemaking titled “Enhanced Cyber Risk Management Standards.” The draft standards, jointly released by the Federal Reserve, the Federal Deposit...more

17 Results

View per page

Page: of 1

Cybersecurity › Public Comment › Risk Management

"My best business intelligence, in one easy email…"