Predictions regarding the 2023 CRA Rule and Section 1071 and how to prepare for expected developments
Consumer Finance Monitor Podcast Episode: Everything You Want to Know About the CFPB as Things Stand Today, and Lots More - Part 1
2024 Credit Reporting Review: Impactful Changes and Future Forecast — FCRA Focus Podcast
Stumbling Your Way Into a Union: Key Advice for Employers: What’s the Tea in L&E?
Are Overtime Wages and Tips Exempt From Income Tax? What Employers Need to Know to Prepare
The Regulatory Situation After the Trump Executive Orders Regulatory Freeze Pending Review
Consumer Finance Monitor Podcast Episode: The CFPB's Proposed Data Broker Rule
Understanding the DFPI's Proposed Rules: A Deep Dive Into California's Digital Financial Assets Law — The Crypto Exchange Podcast
Understanding the DFPI's Proposed Rules: A Deep Dive Into California's Digital Financial Assets Law — Payments Pros – The Payments Law Podcast
Legal Alert: USPTO Proposes Major Change to Terminal Disclaimer Practice
FDA Releases Laboratory-Developed Tests Final Rule – Thought Leaders in Health Law
The FTC’s Rule Banning Non-Compete Agreements | What You Need to Know
An In-Depth Analysis of the CFPB’s Proposed Overdraft Rule - The Consumer Finance Podcast
The FTC Takes Initiative to Stop Junk Fees
Understanding the CFPB's Proposed Digital Payments Larger Participants Rule and Its Implications for Digital Assets — The Consumer Finance Podcast
Instant Decline, Instant Relief? Unpacking the CFPB's Proposed Rule on NSF Fees — Payments Pros: The Payments Law Podcast
Redefining Banking: A Conversation on the CFPB's Proposed 1033 Rule — Payments Pros: The Payments Law Podcast
DE Under 3: FAR Council Submitted for OMB Approval Proposed Rule on “Pay Equity and Transparency in Federal Contracting”
The FTC Announces Three Important Developments
Exploring the Future of Open Banking: A Discussion on CFPB's 1033 Proposed Rule – Crossover Episode With Regulatory Oversight Podcast – The Consumer Finance Podcast
The wireless industry has revolutionized the way we connect, from facilitating teleworking, distance learning, and telemedicine to allowing the American public to interact virtually in almost all other aspects of their daily...more
On November 7, 2024, the Transportation Security Administration (the “TSA”) published a Notice of Proposed Rulemaking (the “Proposed Rule”) that would mandate cyber risk management (“CRM”) and reporting requirements for...more
On December 27, 2024, the U.S. Department of Health and Human Services (HHS), through the Office for Civil Rights (OCR), announced a Notice of Proposed Rulemaking (NPRM) to amend the Security Standards for the Protection of...more
Cyberattacks on U.S. energy infrastructure have been on the rise in 2024. According to the 2024 Thales Data Threat Report, 42% of critical infrastructure companies, including those in the energy sector, suffered data breaches...more
As discussed in our previous blog post, the Cybersecurity and Infrastructure Security Agency (CISA) is proposing a significant new rule to bolster the nation’s cyber defenses through mandatory incident reporting. While...more
Cyber incidents involving critical infrastructure pose a serious risk to the US. In March 2024, the Environmental Protection Agency and the National Security Advisor warned state governors about potential attacks on drinking...more
By now, companies that collect, process, and store the personal data of consumers are used to a fast pace of state privacy and cybersecurity legal activity. This year, companies should also expect increased activity from...more
On April 4, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) published its much-anticipated Notice of Proposed Rule Making for the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA)....more
CISA's proposed rules will require organizations operating in U.S. critical infrastructure sectors to report cyber incidents within 72 hours and ransom payments within 24 hours. ...more
In 2025, new federal reporting requirements will require hundreds of thousands of organizations to report cyber incidents within hours of discovery to the United States Government, marking a significant impact on how...more
On March 15, 2022, the Cyber Incident Reporting for Critical Infrastructure Act of 2022 was signed into law. Generally, CIRCIA requires “covered entities,” defined as entities in certain critical infrastructure sectors, to...more
A sweeping array of businesses are another step closer to requirements to report cybersecurity incidents and ransomware payments to the federal government. On April 4, 2024, the U.S. Department of Homeland Security's (DHS)...more
On March 27, 2024, the Cybersecurity and Infrastructure Security Agency (CISA), an operational component of the Department of Homeland Security (DHS), posted for public inspection its long-anticipated notice of proposed...more
On March 27, 2024, the Cybersecurity & Infrastructure Security Agency (CISA) within the US Department of Homeland Security released a much-anticipated notice of proposed rulemaking (NPRM) to implement the Cyber Incident...more
The federal Cybersecurity and Infrastructure Security Agency (CISA) released a draft of its proposed rule detailing how covered entities operating in critical infrastructure sectors report cyberattacks and ransomware payments...more
President Biden signed into law the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) on March 15, 2022. The background and contours of CIRCIA are discussed in a previous update. CIRCIA authorizes and...more
On March 15, 2022, President Biden signed into law the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (the “Act”) as part of an omnibus appropriations bill. The Act compels “covered entities” — companies in...more
In the wake of Russia’s invasion of Ukraine, and amid growing concerns regarding the threat of increased cyberattacks targeting infrastructure and other critical industries, there has been a flurry of federal activity to...more
President Biden recently signed into law the Cyber Incident Reporting for Critical Infrastructure Act of 2022 as a part of a larger omnibus appropriations bill. The new law sets out mandatory reporting requirements for...more
The United States Congress recently passed legislation that includes new cybersecurity provisions requiring critical infrastructure providers to report cyber security incidents, including the payment of ransom, to the...more
On March 1, the Senate unanimously passed the Strengthening American Cybersecurity Act of 2022, which will require critical infrastructure companies to report significant cyber-incidents and all ransom payments to the...more
On September 17, 2019, the Committee on Foreign Investment in the United States ("CFIUS" or the "Committee") published proposed rules (the "Proposals"). The Proposals would significantly expand CFIUS' jurisdiction but only...more
On September 17, 2019, the Committee on Foreign Investment in the United States (“CFIUS”) published two Proposed Rules to implement most of the Foreign Investment Risk Review Modernization Act of 2018 (“FIRRMA”). CFIUS is an...more
The U.S. Government is renewing its focus on mitigating technological risks by regulating the supply chain for various goods and services. ...more