-
Sep 3, 2024 | 
jdsupra.com | Jennifer Everett |Daniel Felz |Dorian Simmons
On August 27, 2024, the California state legislature passed Assembly Bill 2013 and sent it to Governor Gavin Newsom for signature. If passed, AB 2013 would require companies that make generative AI systems and services publicly available to Californians to post documentation on their website about the data used to train such AI systems and services. This documentation would need to be posted by January 1, 2026. This blog post briefly summarizes AB 2013 and its potential implications for companies.
-
Jul 22, 2024 | 
jdsupra.com | Dorian Simmons
On July 16, 2024, the California Privacy Protection Agency (the “CPPA”) board declined to advance to formal rulemaking California Consumer Privacy Act (“CCPA”) draft regulations on cybersecurity audits, risk assessments, automated decisionmaking technology, insurance companies and updates to existing regulations. The CPPA board voted against advancing the regulations during its board meeting when it also received an update on CPPA enforcement priorities.
-
Jun 13, 2024 | 
jdsupra.com | Daniel Felz |Dorian Simmons
For years, the Gramm-Leach-Bliley Act (GLBA) has required financial institutions to maintain reasonable safeguards for consumer data, but has only had limited breach-reporting requirements. To the extent financial institutions were subject to breach-reporting obligations, these were set by non-GLBA legislation, such as state law, or by relatively narrow incident-reporting rules under Interagency Guidelines overseen by banking regulators.
-
Mar 14, 2024 | 
jdsupra.com | Dorian Simmons
On March 8, 2024, the California Privacy Protection Agency (“CPPA”) Board voted to advance to formal rulemaking proposed regulations under the California Consumer Privacy Act, as amended, regarding risk assessments, automated decisionmaking technology, and certain updates to existing regulations.
-
Feb 14, 2024 | 
jdsupra.com | Dorian Simmons
On February 9, 2024, the California state court of appeals mandated a trial court to vacate its order and judgment prohibiting the California Privacy Protection Agency (the “Agency”) from enforcing the California Privacy Rights Act regulations (the “CPRA Regulations”) until March 29, 2024. The Agency will be able to enforce the CPRA Regulations upon the trial court vacating its order and judgment.
-
Jan 25, 2024 | 
jdsupra.com | Hyun Oh |Dorian Simmons
The Office of the Attorney General of Washington (the “AG”) has updated the Frequently Asked Questions (the “FAQs”) for the Washington My Health My Data Act (the “Act” or “Washington Act”) to provide guidance on the AG’s position concerning whether businesses must publish standalone consumer health data privacy policies under the Act.
-
Sep 28, 2023 | 
jdsupra.com | Hyun Oh |Dorian Simmons
On August 28, 2023, the California Privacy Protection Agency (the “Agency”) released two sets of draft regulations under the California Consumer Privacy Act (the “CCPA”), one for risk assessments and another for cybersecurity audits, as part of the Agency’s informal rulemaking process. We discuss the draft cybersecurity audits in California Proposes Annual Audits to Assess Sufficiency and Compliance of Company Cybersecurity.
-
Sep 28, 2023 | 
mondaq.com | Dorian Simmons |Hyun Oh
On August 28, 2023, the California Privacy Protection Agency
(the "Agency") released two sets of draft regulations
under the California Consumer Privacy Act (the "CCPA"),
one for risk assessments and another for cybersecurity audits, as part of the
Agency's informal rulemaking process. We discuss the draft
cybersecurity audits in California Proposes Annual Audits to Assess
Sufficiency and Compliance of Company Cybersecurity.
-
Aug 31, 2023 | 
mondaq.com | Amy Mushahwar |Dorian Simmons |Alysa Austin
On August 8, 2023, the National Institute of Standards and
Technology (NIST) released the initial draft of its Cybersecurity Framework 2.0 and draft Implementation Examples for public
comment. This marks the first significant update to the NIST
Cybersecurity Framework ("Framework") since its initial
release in 2014, which is intended to address current and future
cybersecurity threats of all organizations and to make it easier
for organizations to use the Framework.
-
Aug 30, 2023 | 
jdsupra.com | Alysa Austin |Amy Mushahwar |Dorian Simmons
On August 8, 2023, the National Institute of Standards and Technology (NIST) released the initial draft of its Cybersecurity Framework 2.0 and draft Implementation Examples for public comment. This marks the first significant update to the NIST Cybersecurity Framework (“Framework”) since its initial release in 2014, which is intended to address current and future cybersecurity threats of all organizations and to make it easier for organizations to use the Framework.
