Predictions regarding the 2023 CRA Rule and Section 1071 and how to prepare for expected developments
Consumer Finance Monitor Podcast Episode: Everything You Want to Know About the CFPB as Things Stand Today, and Lots More - Part 1
2024 Credit Reporting Review: Impactful Changes and Future Forecast — FCRA Focus Podcast
Stumbling Your Way Into a Union: Key Advice for Employers: What’s the Tea in L&E?
Are Overtime Wages and Tips Exempt From Income Tax? What Employers Need to Know to Prepare
The Regulatory Situation After the Trump Executive Orders Regulatory Freeze Pending Review
Consumer Finance Monitor Podcast Episode: The CFPB's Proposed Data Broker Rule
Understanding the DFPI's Proposed Rules: A Deep Dive Into California's Digital Financial Assets Law — The Crypto Exchange Podcast
Understanding the DFPI's Proposed Rules: A Deep Dive Into California's Digital Financial Assets Law — Payments Pros – The Payments Law Podcast
Legal Alert: USPTO Proposes Major Change to Terminal Disclaimer Practice
FDA Releases Laboratory-Developed Tests Final Rule – Thought Leaders in Health Law
The FTC’s Rule Banning Non-Compete Agreements | What You Need to Know
An In-Depth Analysis of the CFPB’s Proposed Overdraft Rule - The Consumer Finance Podcast
The FTC Takes Initiative to Stop Junk Fees
Understanding the CFPB's Proposed Digital Payments Larger Participants Rule and Its Implications for Digital Assets — The Consumer Finance Podcast
Instant Decline, Instant Relief? Unpacking the CFPB's Proposed Rule on NSF Fees — Payments Pros: The Payments Law Podcast
Redefining Banking: A Conversation on the CFPB's Proposed 1033 Rule — Payments Pros: The Payments Law Podcast
DE Under 3: FAR Council Submitted for OMB Approval Proposed Rule on “Pay Equity and Transparency in Federal Contracting”
The FTC Announces Three Important Developments
Exploring the Future of Open Banking: A Discussion on CFPB's 1033 Proposed Rule – Crossover Episode With Regulatory Oversight Podcast – The Consumer Finance Podcast
The U.S. Department of Health and Human Services (HHS) recently released a proposed rule to better protect electronic health data from cybersecurity threats. The proposed rule would apply to health plans, healthcare...more
With the HIPAA Security Rule set to undergo a massive overhaul to boost cybersecurity protections, PEOs need to take note. After all, as stewards of worksite employee and client company data – and as sponsors of group health...more
The HIPAA Security Rule may soon undergo a big overhaul that would better defend healthcare data from cybersecurity threats – and require much more from covered entities when it comes to establishing and maintaining defenses....more
The U.S. Department of Health and Human Services (“HHS”) issued a Notice of Proposed Rulemaking (the “Proposed Rule”) on December 27, 2024, to significantly amend HIPAA’s Security Rule, which sets forth the security standards...more
The Department of Health and Human Services (HHS) has proposed significant modifications to the HIPAA Security Rule and the HITECH Act in an attempt to strengthen cybersecurity protections for electronic protected health...more
On April 4, the Cybersecurity and Infrastructure Security Agency published a notice of proposed rulemaking setting out mandatory reporting requirements for covered entities that experience cybersecurity incidents or make...more
On April 4, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) published its much-anticipated Notice of Proposed Rule Making for the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA)....more
CISA's proposed rules will require organizations operating in U.S. critical infrastructure sectors to report cyber incidents within 72 hours and ransom payments within 24 hours. ...more
On March 15, 2022, the Cyber Incident Reporting for Critical Infrastructure Act of 2022 was signed into law. Generally, CIRCIA requires “covered entities,” defined as entities in certain critical infrastructure sectors, to...more
A sweeping array of businesses are another step closer to requirements to report cybersecurity incidents and ransomware payments to the federal government. On April 4, 2024, the U.S. Department of Homeland Security's (DHS)...more
On March 27, 2024, the Cybersecurity and Infrastructure Security Agency (CISA), an operational component of the Department of Homeland Security (DHS), posted for public inspection its long-anticipated notice of proposed...more
The SEC continues its overhaul of cybersecurity, cyber incident reporting, and privacy controls and requirements for industry registrants, their services providers, and corporate America generally. On March 15, 2023, the SEC...more
President Biden signed into law the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) on March 15, 2022. The background and contours of CIRCIA are discussed in a previous update. CIRCIA authorizes and...more
President Biden recently signed into law the Cyber Incident Reporting for Critical Infrastructure Act of 2022 as a part of a larger omnibus appropriations bill. The new law sets out mandatory reporting requirements for...more
On March 1, the Senate unanimously passed the Strengthening American Cybersecurity Act of 2022, which will require critical infrastructure companies to report significant cyber-incidents and all ransom payments to the...more
A significant expansion of rules relating to cybersecurity risks - particularly for the financial sector - is under consideration by the Securities and Exchange Commission (SEC). In public remarks last week, SEC Chair...more
On January 21, 2020, the far-reaching HIPAA Privacy Proposed Rule, initially released on December 10, 2020, was published in the Federal Register. Despite speculation that the publication timeline would be altered when the...more
The modified rules, which still remain among the most prohibitive, could be adopted in final form as early as this month. Since September 2016, the New York State Department of Financial Services (DFS) has been...more
The New York Department of Financial Services has issued proposed “first-in-the-nation” cybersecurity rules that could place a heavy compliance burden on affected financial companies; Morgan Lewis submitted a comment letter...more