News & Analysis as of May 7, 2025

Cybersecurity › Risk Assessment › Reporting Requirements

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

New York Cybersecurity Regulation Requires Submission of Compliance Certification or Acknowledgement of Noncompliance Next Week

Quarles & Brady LLP on 4/10/2025

On April 3, 2025, the New York State Department of Financial Services (“DFS”) issued reminders about upcoming implementation and reporting deadlines related to its cybersecurity regulations. Upcoming deadlines require...more

2025 J.S. Held Global Risk Report: Artificial Intelligence, Data & Digital Regulations

J.S. Held on 3/13/2025

Artificial Intelligence (AI) has been touted as the answer to a multitude of business challenges. However, AI – along with machine learning and large language models (LLMs) – is still fraught with technical and regulatory...more

D-Day for the EU Cyber Resilience Act

Alston & Bird on 12/12/2024

Our Privacy, Cyber & Data Strategy Team discusses the new Cyber Resilience Act (CRA) that affects manufacturers and distributors of connected devices that are in use anywhere in the European Union....more

NY Department of Health Bolsters Hospital Cybersecurity Regulations

Holland & Knight LLP on 11/22/2024

New York hospitals have less than a year to dust off their Health Insurance Portability and Accountability Act (HIPAA) compliance programs and update them to comply with more stringent and detailed state regulations. Last...more

Hospital Administrators – Is Your Hospital Cyber-Secure?

Lippes Mathias LLP on 11/20/2024

On October 2, 2024, New York adopted new regulations requiring general hospitals to implement heightened cybersecurity safeguards. General hospitals, as defined in Article 28 of the NY Public Health Law, generally must begin...more

Trends in US Cybersecurity Regulation

Mayer Brown on 11/4/2024

As cybersecurity rules proliferate, companies must navigate a maze of new, and often overlapping, proactive and reactive cybersecurity requirements and guidance. This Legal Update surveys new cybersecurity rules and...more

Navigating the NY DFS Cybersecurity Amendments: A Timeline for 2024 Through 2025

Ankura on 9/24/2024

In December 2023, the New York Department of Financial Services (NY DFS) issued amendments to the cybersecurity requirements, originally adopted in 2017, which include expanded control requirements and stricter reporting...more

Benefits of a vCISO in the Age of AI-Driven Cyberattacks

J.S. Held on 9/4/2024

Cyberattacks powered by artificial intelligence have become more sophisticated as bad actors utilize machine learning to analyze vulnerabilities, automate exploits, and outpace traditional security measures. Through the use...more

SEC Tightens Cybersecurity Requirements with Regulation S-P Amendments

Foley & Lardner LLP on 6/14/2024

Share on Twitter Print Share by Email Share Back to top “The basic idea for covered firms is if you’ve got a breach, then you’ve got to notify. That’s good for investors.” Those were among the remarks that U.S. Securities and...more

SEC Revamps and Enhances Data Protections with Amendments to Regulation S-P

Foley Hoag LLP - Security, Privacy and the... on 5/30/2024

The Securities and Exchange Commission (“SEC”) has announced the adoption of amendments to Regulation S-P (“Amendments”) to modernize and enhance the rules that govern the treatment of consumers’ nonpublic personal...more

Don't Be the Weakest Link – Your Team's Crucial Role in Cybersecurity

NAVEX on 5/3/2024

Cybersecurity success depends on more than just technology. As we’ve seen in part one and part two of this series on cybersecurity risk, the costs of a cyber attack are high – and bad actors always look for the easiest entry...more

Public Company Watch: December 2023

Paul Hastings LLP on 12/22/2023

In the December Public Company Watch, we cover key issues impacting public companies, including a preview of the SEC’s latest regulatory agenda, an update regarding the Fifth Circuit vacating the SEC’s share repurchase rules,...more

New York State Prepares to Regulate Hospital Cybersecurity Programs

Mintz - Health Care Viewpoints on 11/29/2023

On November 13, 2023, Governor Kathy Hochul announced plans to regulate cybersecurity for New York general hospitals regulated under Article 28 of the Public Health Law. As proposed, the regulations will provide an additional...more

Incident Reporting: The Newly Proposed Cybersecurity Requirements

Clark Hill PLC on 11/14/2023

Last month the Federal Acquisition Regulatory (FAR) Council announced a major proposal regarding cybersecurity incident reporting and information. Comments currently are now due by February 2, 2024....more

President Biden Issues Wide-Ranging Executive Order on Artificial Intelligence

K&L Gates LLP on 11/6/2023

On 30 October 2023, President Biden issued a long-awaited executive order (EO) on artificial intelligence (AI). The EO itself is available here, and a one-page fact sheet issued by the White House is available here. The...more

Recent Developments for Directors - October 2023 Edition

Latham & Watkins LLP on 10/18/2023

SEC Adopts Final Rules on Cybersecurity Disclosures - The SEC has adopted rules requiring companies to provide disclosure within four business days of determining that a material cybersecurity incident has occurred, and...more

A Potential Look Into the Future: California Issues First Draft of Cybersecurity Audit and Risk Assessment Regulations

Perkins Coie on 9/27/2023

The Board of the California Privacy Protection Agency (the CPPA) held its first meeting since July on Friday, September 8, 2023, and discussed the first public draft of cybersecurity audit regulations and risk assessment...more

New York’s Department of Financial Services Moves to Further Bolster Cybersecurity Requirements

Jackson Lewis P.C. on 8/17/2023

The New York Department of Financial Services (DFS) has been increasingly active in enforcing the rigorous cybersecurity requirements imposed on “covered entities” under 11 NYCRR Part 500 (Reg 500). DFS has published an...more

SEC Heightens Issuers' Cybersecurity Disclosure Requirements

Husch Blackwell LLP on 8/16/2023

On July 26, 2023, the U.S. Securities and Exchange Commission (SEC) adopted final rules regarding cybersecurity risk management, strategy, governance, and incident reporting by public companies. The final rules require...more

The Rise of Artificial Intelligence (AI) in GRC: Trends and Use Cases

Mitratech Holdings, Inc on 8/9/2023

Emerging developments in AI, Machine Learning, Natural Language Processing, Automation, and More – Where Does it All Fit Inside the World of GRC? AI-driven technology has been making headlines for breakthroughs as well as...more

SEC Finalizes Cybersecurity Rules for Public Companies: What's New, What's Not, and What’s Next

Vinson & Elkins LLP on 7/27/2023

On July 26, 2023, the Securities and Exchange Commission (“SEC”) voted to approve final rules governing cybersecurity disclosures of public companies (“Final Rules”). The Final Rules make meaningful changes to the current and...more

CISOs Under the (Liability) Gun

Woodruff Sawyer on 12/14/2022

Chief information security officers (CISOs) face an increased likelihood of legal scrutiny after a significant breach. It’s par for the course for CISOs to be scrutinized when security programs don’t hold up under attack—but...more

NYDFS Proposes Amendments to Cybersecurity Regulation

Holland & Knight LLP on 11/17/2022

The New York Department of Financial Services (NYDFS) on Nov. 9, 2022, released Proposed Amendments to its Cybersecurity Regulation. The NYDFS Cybersecurity Regulation was one of the first laws requiring companies to comply...more

Cybersecurity Awareness Means, at a Minimum, Doing the Basics (Again and Again)

Polsinelli on 10/11/2022

On September 30, 2022, the White House kicked off Cybersecurity Awareness Month by reminding citizens of the impacts cyberattacks can have on critical infrastructure such as “electric grids and fuel pipelines … and many other...more

New York Proposes Cybersecurity Rules for Financial Institutions

Sheppard Mullin Richter & Hampton LLP on 8/29/2022

On July 29, the New York Department of Financial Services (NYDFS) released Draft Amendments to its Part 500 Cybersecurity Rules that would impose new obligations on financial institutions on reporting, governance, testing,...more

32 Results

/

View per page

Page: of 2

Next »