When AI Meets PI: Assessing and Governing AI from a Privacy Perspective
The American Privacy Right Act (APRA) explained
Navigating the Regulation Jungle: How to Be Compliant, Work Efficiently, and Stay Sane
Healthcare Document Retention
Legal Alert | Wiretap Laws in the United States
Business Better Podcast Episode: Cyber Adviser – A Comparison of AI Regulatory Frameworks
Cost of Noncompliance: More Than Just Fines
Will the U.S. Have a GDPR? With Rachael Ormiston of Osano
No Password Required: MITRE Engage Lead, Innovator in Cyber Deception, and Dance Community Builder
Navigating State Privacy Laws: A Conversation with Oregon & Texas Regulators about Privacy Enforcement
The Team Continues to Grow: A Conversation With Our Newest Colleague, Kaitlin Clemens — Unauthorized Access Podcast
Episode 326 -- Dottie Schindlinger on Diligent's Report on Board Oversight of Cybersecurity Risks and Performance
[Webinar] Midyear Data Privacy Check-in: Trends & Key Updates
Information Security and ISO 27001
Decoding Privacy Laws: Insights for Small to Mid-Sized Businesses — Regulatory Oversight Podcast
No Password Required: Education Lead at Semgrep and Former Czar for Canada’s Election Security
Navigating State Privacy Laws
[Webinar] You Are Here: First Steps in Data Mapping
Data Centers: Demand, Development, and Future Challenges With Ali Greenwood — TAG Infrastructure Talks Podcast
AGG Talks: Women in Tech Law - Episode 1: Charting the Course: Women Trailblazing in Cybersecurity and Crisis Governance
In April 2024, the UK government reiterated its vision for open finance, with UK Economic Secretary Bim Afolami (MP) announcing the creation of the Open Finance Taskforce at the 2024 Innovate Finance Global Summit. The...more
In This Issue: ..The Consumer Financial Protection Bureau (CFPB) published a Consumer Financial Protection Circular 2022-04 (Circular) in relation to safeguarding consumer data under the Consumer Financial Protection Act...more
So you're a fintech startup, buying a fintech company, or expanding the technical capabilities of your financial business. Or you're a tech company that is getting into the payments space. Where do you start when it comes to...more
The French Data Protection Authority’s white paper discusses how companies can comply with data privacy and security obligations. The use of card, contactless, and innovative digital payment solutions has significantly...more
New York AG Letitia James reached a settlement with online water filtration retailer Filters Fast LLC to resolve allegations that it failed to protect customers’ payment card information in a 2019 data breach in violation of...more
As contactless transactions boom, EU regulators publish draft guidelines on the interplay between the GDPR and PSD2. Last year, more than half of all payments in the UK were made by card and contactless methods, while cash...more
Key developments of interest over the last month include: United Kingdom: HM Treasury publishes Call for Evidence for Payments Landscape Review, seeking industry input on how payment systems could be improved. The deadline...more
Developing Contingency Plans: The NYDFS Mandate on Licensed Virtual Currency Businesses - The events surrounding COVID-19 have increased the use of fintech products, both out of necessity and convenience. Shelter-in-place...more
In this month's edition of our Privacy & Cybersecurity Update, we examine the European Commission's second annual review of the Privacy Shield and the Department of Commerce's guidance on how to comply with the Privacy Shield...more
The U.S. Board of Governors of the Federal Reserve System announced that it is undertaking a study that will begin this month with respect to fraud in the U.S. payments system. The study will identify causes and contributing...more
A new standard published by the Payment Card Industry Security Standards Council (“PCI SSC”) may make it easier and less costly for retailers to take advantage of lower cost PIN based transactions in card present scenarios....more
The FCA and PRA announced changes to enforcement process with the aim of strengthening the transparency and effectiveness of enforcement decision-making processes. Some of the changes have already come into force, the rest...more
The Secure Payments Task Force, a 160-member task force convened by the US Federal Reserve Board to advance the safety, security and resiliency of the national payment system, requested comments from payment system industry...more
Why it matters - Has the U.S. payment system improved? The process has certainly begun, the Federal Reserve System revealed in a report detailing the steps that have been taken to modernize the system and enhance both...more
Yesterday's Consumer Financial Protection Bureau's (CFPB) Consent Order against Dwolla, Inc., a company that operates an online payment system, is yet more evidence of the murky world of Unfair, Deceptive, or Abusive Acts or...more
A security event involving payment card data, especially card present data, can be one of the most costly events a company may face. Not only did a recent study report the average total cost of a data breach as $3.8 million,...more
Trump Hotel Collection, the high-end hotel chain owned by the billionaire Republican presidential hopeful and real estate developer Donald Trump, has confirmed a data security breach involving malware that the company says...more
Companies can be fined by the federal government for failing to properly safeguard consumer data, according to a decision this week by Pennsylvania's federal appellate court....more
Why it matters - In an effort to provide guidance to payment systems looking to reduce "pocket-to-pocket" payment times, the Consumer Financial Protection Bureau (CFPB) released principles for consumer protection to...more
In response to advanced payment technology and consumers’ preference to non-traditional payment systems of writing checks, paying cash, or swiping a credit or debit card, the Consumer Financial Protection Bureau (CFPB)...more
The Consumer Protection Principles continue the CFPB’s expansive approach. Stating that it wants to ensure that “any new payment systems are secure, transparent, accessible, and affordable to consumers” and have “robust...more
Earlier today, the Consumer Financial Protection Bureau (“CFPB”) released a series of consumer protection principles for the development of new payment systems (“Principles”). The CFPB’s stated purpose in releasing the...more
Starting Jan. 1, 2015, the Payment Card Industry Data Security Standard (PCI DSS) Version 3.0 (click-through agreement required) will replace Version 2.0. The PCI DSS is a set of requirements developed by the four major...more
On October 17, 2014, President Obama signed an executive order for its BuySecure Initiative requiring government agencies to transition payment processing terminals and credit, debit and other payment cards to employ enhanced...more
President Obama recently signed an executive order requiring federal agencies to improve the security of payment card transactions by upgrading to chip-and-PIN payment systems, which enable payments to be processed using an...more