News & Analysis as of

New Guidance Data Protection Data Breach

Robinson+Cole Data Privacy + Security Insider

CISA Warns of Three New Vulnerabilities Actively Exploited by Threat Actors

On July 17, 2024, the Cybersecurity & Infrastructure Security Agency (CISA) issued an Alert adding three vulnerabilities to its Known Vulnerabilities Catalog. ...more

Mayer Brown

EDPB Provides Guidance On Determining A 'Main Establishment' And The 'One-Stop-Shop' Mechanism

Mayer Brown on

The opinion was issued in response to a request by the French Data Protection Authority and provides guidance on the conditions for determining a controller's main establishment where that controller has establishments in...more

Mayer Brown

Cyber security – Pensions Regulator publishes updated guidance for trustees

Mayer Brown on

With the pensions industry having direct experience of recent cyber security incidents, the Pensions Regulator (TPR) has updated its guidance for trustees in this area. As a reminder, this year saw Capita suffer a cyber...more

A&O Shearman

Pensions: what's new this week - 11 September 2023

A&O Shearman on

Welcome to your weekly update from the Allen & Overy Pensions team, covering all the latest legal and regulatory developments in the world of workplace pensions. This week we cover the following topics: HMRC Pensions Tax...more

Orrick, Herrington & Sutcliffe LLP

HHS releases health care cybersecurity guide

On March 8, the Department of Health and Human Services (HHS) released a cybersecurity implementation guide to assist public and private health care sectors prevent cybersecurity incidents. The Cybersecurity Framework...more

Robinson+Cole Data Privacy + Security Insider

FBI + CISA Warn Companies (Especially Health Care) About Zeppelin Ransomware

The FBI and CISA recently issued a Cybersecurity Alert entitled “#StopRansomware: Zeppelin Ransomware” providing an alert to organizations about the proliferation of Zeppelin ransomware attacks and information on the...more

Wyrick Robbins Yates & Ponton LLP

Ignore Evolving Security Threats at Your Own Risk: OCR Raises Stakes on Cybersecurity in the Health Care Sector

OCR’s recent focus on cybersecurity in the health care sector sends a clear message to HIPAA covered entities and business associates: OCR expects you to implement security measures that address known threats to ePHI that are...more

Polsinelli

Federal Banking Regulators Issue New Guidance for Complying with 36 Hour Cybersecurity Incident Reporting Requirement

Polsinelli on

On March 29, 2022, federal banking regulators issued important guidance for how banking organizations can comply with the upcoming requirement to notify regulators within 36 hours of ransomware or other disruptive...more

Manatt, Phelps & Phillips, LLP

GDPR: EDPB’s New Breach Guidelines Present Additional Challenges for Legal & Security Professionals

To close out 2021, the European Data Protection Board (EDPB) adopted additional General Data Protection Regulation (GDPR) data breach notification guidelines in Guidelines 01/2021 on Examples regarding Personal Data Breach...more

Burr & Forman

FINRA Urges Firms to Heed CISA/FBI “Shields Up” Warning on Russia

Burr & Forman on

The regular “Weekly Update” email from the Financial Industry Regulatory Authority (“FINRA”) had an eye-catching warning February 16, urging broker-dealer member firms to heed the “Shields Up” cyber threat warning from the...more

Lighthouse

2021 Data Privacy Overview: New Regulations and Guidance

Lighthouse on

While everyone hoped that 2021 would be less tumultuous than 2020, it certainly did not turn out that way in the end. The same was true in the world of data privacy – with sweeping new data protection regulations and guidance...more

Jones Day

California Attorney General Issues Bulletin on Health Data Breach Reporting Requirements

Jones Day on

The California Attorney General ("AG") has issued guidance reminding health care providers of their duty to report health care data breaches and to comply with other state and federal data privacy laws....more

Jones Day

New York Department of Financial Services Announces New Guidance on Ransomware Prevention

Jones Day on

On June 30, 2021, the New York Department of Financial Services ("NYDFS") identified key cybersecurity measures to prevent and prepare for ransomware attacks. ...more

Akin Gump Strauss Hauer & Feld LLP

Vermont Attorney General Provides Guidance on Security Breach Notice Act

On March 5, 2020, Gov. Phil Scott (VT-R) signed into law amendments to the Security Breach Notice Act (the “Act”). The amendments, which originated in the State Senate as part of an initiative addressing a number of data...more

Dechert LLP

COVID-19 Coronavirus Business Impact: ICO Confirms Approach to Data Protection Enforcement

Dechert LLP on

The Information Commissioner’s Office (ICO), the UK’s data protection supervisory authority, has recently issued guidance outlining its approach to the enforcement of data protection obligations during the COVID-19 pandemic....more

Shook, Hardy & Bacon L.L.P.

Privacy and Data Security Alert l March 2020

Shook Weighs in on Updated CCPA Regulations - In response to extensive public comment, the California Attorney General’s office released modified draft regulations under the CCPA on February 7. Shook has provided initial...more

Shook, Hardy & Bacon L.L.P.

Privacy and Data Security Alert | November 2019

EU Court Allows Class Action to Proceed, Sets Precedent for Future Data Breach Class Actions - A class action brought against Google will be allowed to move forward after the plaintiff’s appeal was permitted, allowing him to...more

Sheppard Mullin Richter & Hampton LLP

FTC Cyber Guidance for Small Business has Tips Helpful to All

The Federal Trade Commission recently issued a cyber guide that, while intended for small businesses, can be of help for all businesses. The purpose of the guide, which includes various modules, is to help smaller businesses...more

Moore & Van Allen PLLC

SEC Issues Disclosure Guidance as Part of Continued Focus on Cybersecurity

Moore & Van Allen PLLC on

As cybersecurity attacks have continued to gain prominence as a threat posing critical risk management and compliance challenges for financial institutions, the Securities and Exchange Commission (SEC) has emerged as an...more

Stinson - Corporate & Securities Law Blog

SEC Cybersecurity Disclosure and Controls Checklist

In February 2018 the SEC outlined its views with respect to cybersecurity disclosure requirements under the federal securities laws as they apply to public reporting companies. Set forth below is a checklist of items included...more

Kramer Levin Naftalis & Frankel LLP

SEC Guidance Focuses on Cybersecurity Procedures and Disclosure Issues

On Feb. 21, the Securities and Exchange Commission (SEC) released interpretive guidance on public companies’ disclosure practices regarding cybersecurity breaches and risks to the public....more

Fenwick & West LLP

SEC Releases Updated Cybersecurity Guidance

Fenwick & West LLP on

The U.S. Securities and Exchange Commission on Feb. 21, 2018, issued interpretive guidance on public company cybersecurity disclosures. The new guidance will affect public companies and companies seeking to go public in...more

Ballard Spahr LLP

SEC Releases Guidance on Cybersecurity Disclosures

Ballard Spahr LLP on

In light of the increasing significance of cybersecurity incidents, and their potential impact on a company's operations, on February 21, the Securities and Exchange Commission (SEC) issued guidance to public reporting...more

Holland & Knight LLP

2017, We Hardly Knew You: A Look Ahead to 2018

Holland & Knight LLP on

Taking over as editors of Holland & Knight’s Government Contracts Blog has been a labor, but it has been a labor of love. Like the rest of the Government Contracts Team, we are passionate about staying on top of the latest...more

Snell & Wilmer

“Stick With Security” - Getting Up to Speed With the FTC’s New Initiative

Snell & Wilmer on

Companies that have experienced data breaches or security hacks have subsequently found themselves the subject of enforcement actions by the Federal Trade Commission (“FTC”) for violating the FTC Act, due to inadequate...more

30 Results
 / 
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide