News & Analysis as of May 6, 2025

Cybersecurity › Risk Assessment › Breach Notification Rule

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

‘Security! Security!’ HHS Proposes Updates to HIPAA’s Security Rule

Dickinson Wright on 2/27/2025

Can you remember healthcare security 20+ years ago? It seems like a different world from now. Believe it or not, the HIPAA Security Rule has barely changed since it was first enacted in 2003 and has been long overdue for a...more

NY-licensed financial services companies must harden incident response plans, improve breach readiness by November 1

Constangy, Brooks, Smith & Prophete, LLP on 10/28/2024

New York’s Cybersecurity Regulation continues its phased roll-out on November 1, when licensed financial services companies face a host of new requirements aimed at bolstering breach readiness and improving their ability to...more

SEC Tightens Cybersecurity Requirements with Regulation S-P Amendments

Foley & Lardner LLP on 6/14/2024

Share on Twitter Print Share by Email Share Back to top “The basic idea for covered firms is if you’ve got a breach, then you’ve got to notify. That’s good for investors.” Those were among the remarks that U.S. Securities and...more

New Cybersecurity Guide Released

Saul Ewing LLP on 2/20/2024

On February 16, 2024, the HHS Office for Civil Rights (OCR) and the National Institute of Standards and Technology (NIST) published a final version of the cybersecurity resource guide (the “Guide”) with respect to the HIPAA...more

Importance of Protecting Employee Information as Privacy and Cybersecurity Laws Proliferate

Jackson Lewis P.C. on 10/3/2023

Most human resources professionals are concerned about the privacy and security of the vast amounts of personal information they manage. This article discusses steps to consider taking against the challenges. Deluge of...more

Hong Kong Issues Guidance on Data Breach Handling and Notifications

Latham & Watkins LLP on 7/21/2023

The guidance encourages organisations to formulate a data breach response plan, and outlines recommendations for handling an increasing number of data breach incidents. On 30 June 2023, the Office of the Privacy...more

The New York Department of Financial Services Cybersecurity Rules — What Companies Need to Know

Paul Hastings LLP on 10/12/2022

On March 1, 2017, New York’s Department of Financial Services (“NYDFS”) implemented a comprehensive cybersecurity regulation aimed at financial institutions (the “Cybersecurity Regulation”)....more

Data Privacy and Cybersecurity New Laws and Regulations Report

Paul Hastings LLP on 10/6/2022

Throughout 2022, we continue to see regulators placing an emphasis on the importance of protecting and securing information, in particular consumer personal information, at both the federal and state levels. ...more

Healthcare Companies Seek to Manage Risk of Ransomware Attacks, According to Report

Jackson Lewis P.C. on 2/16/2022

Healthcare companies continue to face increased risks of ransomware attacks on their operations. According to the recently released BD Cybersecurity Annual Report for 2021, such attacks are also increasingly sophisticated....more

New Data Breach Reporting Requirements in Canada

Womble Bond Dickinson on 10/30/2018

Canada now follows the US trend to require reporting of personal data exposures. Beginning November 1, 2018, a change in the law will require companies subject to Canada’s federal data protection laws to report data breaches...more

What is GDPR and how does it impact American businesses?

Butler Snow LLP on 6/6/2018

On May 25, 2018, the European Union’s General Data Protection Regulation (GDPR) took effect. Although EU laws typically don’t have a worldwide impact, the GDPR will impact business across the globe. The GDPR has an extremely...more

South Carolina’s New Insurance Data Security Act: Pebbles Before a Landslide?

White and Williams LLP on 5/31/2018

The ramp-up of cybersecurity regulation, albeit in a patchwork fashion through state-level legislation, has begun. On May 18, 2018, South Carolina enacted the Insurance Data Security Act (Act), becoming the first state to...more

Cybersecurity: 2017 Report & 2016 Reflections - What Businesses and Boards Need to Know

Bennett Jones LLP on 2/10/2017

In 2016, cybersecurity continued to grow as a primary business risk for companies worldwide. Data breaches continued to escalate both in number and magnitude and the landscape of legal and regulatory liability evolved and...more

"Privacy & Cybersecurity Update - October 2016"

Skadden, Arps, Slate, Meagher & Flom LLP on 11/2/2016

In this edition of our Privacy & Cybersecurity Update, we take a look at the FCC's new rules for broadband privacy, the FTC's new playbook for data breach response and notification, the NHTSA's voluntary guidance for...more

FTC Releases a Data Breach Response Guide For Business

Snell & Wilmer on 10/27/2016

Data breaches are fast becoming a fact of life. Experiencing a data breach is never a pleasant experience, regardless of how it happens – by accident, by criminal intent, or by system failure. Someone steals a company...more

Legal Trends: Cybersecurity

Blake, Cassels & Graydon LLP on 1/5/2016

New privacy torts have recently emerged in certain Canadian jurisdictions, including intrusion upon seclusion and publicity given to private life. Intrusion upon seclusion allows a plaintiff to sue if (1) a person has...more

TN Ethics Opinion Approves Lawyers’ Cloud Storage of Client Data

Burr & Forman on 9/25/2015

Tennessee has joined other states in formally approving lawyers’ cloud-storage of client-confidential data. The Board of Professional Responsibility (“BOPR”) held that lawyers ethically may use cloud storage for...more

Don't Wait for It; Recent HIPAA Enforcement Action Signal More to Come in Phase 2 Audits

Orrick, Herrington & Sutcliffe LLP on 9/21/2015

Officials at the U.S. Department of Health and Human Services Office of Civil Rights (HHS OCR) have recently selected a vendor to conduct the second wave of HIPAA audits. These so-called "Phase 2 Audits" are set to commence...more

Cybersecurity Update - July 2015

Foley & Lardner LLP on 7/31/2015

Employees are the front line of your information security defense. While technological protections are essential (for example, anti- virus software, firewalls, spam filters, etc.), none are as effective as a vigilant end...more

Privacy & Cybersecurity Newsletter: International Edition July 2015

Troutman Pepper Locke on 7/31/2015

Retail Tracking Update: Privacy Guidance Following Nomi Technologies - There is currently a widespread effort to quantify everything, from steps, to sleep, to batted ball exit velocity. Fifteen years ago, TV host Jeremy...more

20 Results

/

View per page

Page: of 1