Amy Mushahwar

Nov 15, 2023 | jdsupra.com | Kathleen Benway |Katherine Doty Hanniford |Amy Mushahwar

With an amendment to its Safeguards Rule, the Federal Trade Commission has joined other federal agencies regulating cybersecurity breaches. Our Privacy, Cyber & Data Strategy Team analyzes how the amendment will affect nonbanking financial institutions and how it dovetails – and conflicts – with myriad other federal and state data breach notification regulations.

Nov 6, 2023 | mondaq.com | Kimberly Peretti |Katherine Doty Hanniford |Amy Mushahwar |Kathleen Benway

On October 27, 2023, the FTC approved an amendment to the Safeguards Rule (the "Amendment") requiring that non-banking financial institutions notify the FTC in the event of a defined "Notification Event" where customer information of 500 or more individuals was subject to unauthorized acquisition. The Amendment becomes effective 180 days after publication in the Federal Register.

Aug 31, 2023 | mondaq.com | Amy Mushahwar |Dorian Simmons |Alysa Austin

On August 8, 2023, the National Institute of Standards and Technology (NIST) released the initial draft of its Cybersecurity Framework 2.0 and draft Implementation Examples for public comment. This marks the first significant update to the NIST Cybersecurity Framework ("Framework") since its initial release in 2014, which is intended to address current and future cybersecurity threats of all organizations and to make it easier for organizations to use the Framework.

Aug 30, 2023 | jdsupra.com | Alysa Austin |Amy Mushahwar |Dorian Simmons

On August 8, 2023, the National Institute of Standards and Technology (NIST) released the initial draft of its Cybersecurity Framework 2.0 and draft Implementation Examples for public comment. This marks the first significant update to the NIST Cybersecurity Framework (“Framework”) since its initial release in 2014, which is intended to address current and future cybersecurity threats of all organizations and to make it easier for organizations to use the Framework.