News & Analysis as of May 5, 2025

Cybersecurity › Third-Party › Today's Popular Updates

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

DORA Compliance Part 1: Proactively Meeting DORA Supply Chain Resilience Obligations

Integreon on 3/31/2025

Introduction to DORA and its Implications - As of Jan.17, 2025, the European Union’s Digital Operational Resilience Act (DORA) became enforceable. This new regulatory framework significantly impacts financial institutions and...more

The Growing Cybersecurity Risks in the Cannabis Industry

Clark Hill PLC on 2/26/2025

Those familiar with the industry know that cannabis retailers find themselves in a unique position compared to other product retailers. Cannabis retailers face significant regulatory hurdles to their operation—particularly in...more

Cyber Risks and Insurance 2025 Forecast

Wiley Rein LLP on 12/20/2024

As we prepare to close the books on another eventful year in the cyber and privacy space, Wiley’s cyber insurance team is already making predictions for 2025. Q: So, let’s get right into it – based on your experience this...more

Litigation Grows Around Website Technologies, With Focus on Sensitive Data

Wiley Rein LLP on 7/10/2024

Data privacy-related lawsuits have skyrocketed in recent years. Federal courts saw over 900 data privacy dockets in 2020 – but witnessed a surge to 1,767 dockets in 2023. At the halfway point in 2024, federal court data...more

FTC Continues Focus on Disclosure of Health Information to Third-Party Technologies

BakerHostetler on 5/23/2024

A recently announced settlement with online alcohol addiction treatment service Monument Inc. demonstrates the Federal Trade Commission’s (FTC) continued focus on the use and disclosure of health data. The proposed settlement...more

Corporate Use of Third-Party Artificial Intelligence (AI) Tools

Society of Corporate Compliance and Ethics... on 2/22/2024

At the 2024 SCCE European Compliance & Ethics Institute, Segev Shani, Chief Compliance & Regulatory Officer at Neopharm Group will be leading the session “Corporate Use of Third-Party Artificial Intelligence (AI) Tools.” In...more

Client Alert: How Regulatory Events of 2023 Should Guide Financial Institutions' New Year's Resolutions for 2024

Jenner & Block on 1/12/2024

As consumer-facing financial institutions of all types—from well-established banks to newly-launched fintechs—set their 2024 regulatory compliance goals, they may wonder if their New Year’s resolutions align with those that...more

Global Trends in IT Outsourcing

King & Spalding on 10/13/2022

The IT sector has been demonstrating its value in the wake of the COVID-19 pandemic. As more businesses adopt hybrid or even permanent remote work, worldwide IT spending is forecast to reach $4.5 trillion in 2022 and expand...more

China Enhances Scrutiny for Cross-Border Data Transfer that would Impact Multinational Companies

Paul Hastings LLP on 7/20/2022

1. Introduction- China’s cross-border data transfer rules are unfolding in real time and taking clearer shape. On July 7, 2022, China’s cybersecurity regulatory agency, the Cyberspace Administration of China (“CAC”), issued...more

Construction Industry: Data Security Considerations

Jackson Lewis P.C. on 3/31/2022

No industry is immune to privacy and cybersecurity risks, and the construction industry is no exception. Those in the construction industry can protect against a potential cyberattack by understanding the risks and...more

New FINRA Guidance Suggests Increased Scrutiny of Member Firms’ Relationships with Third-Party Vendors

Troutman Pepper Locke on 8/20/2021

Who Needs to Know FINRA member firms. - Why It Matters On August 13, the Financial Industry Regulatory Authority released a regulatory notice to member firms, clarifying their existing obligations on the supervision of...more

Even the DOL is Issuing Cybersecurity Instructions

Dentons on 6/14/2021

In April, the Department of Labor, specifically the Employee Benefits Security Administration, issued cybersecurity guidance to assist in protecting “the retirement benefits of America’s workers.” This guidance falls neatly...more

Water Filtration Retailer Settles Allegations Stemming From 2019 Data Breach

Cozen O'Connor on 5/21/2021

New York AG Letitia James reached a settlement with online water filtration retailer Filters Fast LLC to resolve allegations that it failed to protect customers’ payment card information in a 2019 data breach in violation of...more

FTC Fines Kids’ App Developer For COPPA Violations

Fox Rothschild LLP on 6/8/2020

The FTC has fined an app developer for failure to acquire parental consent for sharing online identifiers for use for targeted advertising. A developer of apps that are popular with children has agreed to pay $150,000 and to...more

FTC announces new and improved data security guidance

Bricker Graydon LLP on 2/18/2020

On January 6, 2020, Andrew Smith, Director of the Federal Trade Commission (FTC) Bureau of Consumer Protection, announced three significant improvements to the FTC’s approach to data security enforcement cases....more

Steps to Develop a Mature Third-Party Risk Management Program With High-Risk Third Parties (Part 3)

BakerHostetler on 2/7/2020

This blog is the third in a series exploring how organizations can prevent or mitigate the severity of a third-party data breach or cyber exploit by implementing a variety of cybersecurity risk management controls, such as...more

Steps to Develop a Mature Third-Party Risk Management Program with High-Risk Third Parties (Part 2)

BakerHostetler on 1/27/2020

This blog is the second in a series exploring how organizations can prevent or mitigate the severity of a third-party data breach or cyber exploit by implementing a variety of cybersecurity risk management controls, such as...more

China Issues New Cybersecurity Law to Protect Children

Latham & Watkins LLP on 9/9/2019

China’s PCPPIC protects children’s personal information in much the same way as COPPA and the GDPR, but with a few differences. On August 22, 2019, the Cyberspace Administration of China (CAC) released a new data privacy...more

Should Companies Terminate Third Party Vendors That Cause A Data Breach?

Jackson Lewis P.C. on 3/5/2019

According to reports, bank customers in Australia (yes, data breach notification requirements exist down under) have been affected by “an industry-wide” data breach experienced by a third-party service provider to the banks –...more

Ringing in 2019 with New State Privacy and Data Security Laws Impacting Data Brokers and Insurers

Foley & Lardner LLP on 1/11/2019

New state laws that took effect January 1, 2019, likely will have a broader impact on how U.S. companies collect, process, and secure consumers’ personal information, in addition to how and when they report data breaches....more

Vendor Risk & Data Security: Why Is This So Hard?

NAVEX on 1/3/2019

Studies about vendor risk related to data security always fascinate me, because conceptually those risks are so similar to the vendor risk challenges corporate compliance officers face with anti-corruption — and yet, the...more

Privacy & Cybersecurity Update - October 2018

Skadden, Arps, Slate, Meagher & Flom LLP on 11/1/2018

In this month's edition of our Privacy & Cybersecurity Update, we examine the European Data Protection Board's published opinions on data protection impact assessments, an Ohio court's ruling that bitcoin is covered insured...more

First Look - Summer 2018: Insurance Newsletter

Steptoe & Johnson PLLC on 8/15/2018

Your company’s computer system has been compromised by a hacker. From your initial investigation, you discover that the hacker has accessed proprietary company information and customer information including Social Security...more

SEC Prioritizes Data Security and Expects More Mature Cybersecurity Programs

Alston & Bird on 7/12/2018

Investment advisers and broker-dealers can expect more scrutiny of their data security from the Securities and Exchange Commission. Our Cybersecurity Preparedness & Response and Investment Management, Trading & Markets teams...more

When Smart Contracts are Outsmarted: The Parity Wallet “Freeze” and Software Liability in the Internet of Value

Proskauer - Blockchain and the Law on 2/26/2018

The recent Parity wallet “freeze” provides yet another example of a coding vulnerability in a smart contract (rather than a flaw in the underlying blockchain or cryptography) resulting in an exploit that compromises...more

31 Results

/

View per page

Page: of 2

Next »