Josh Hasler

Dec 15, 2023 | jdsupra.com | Briana Falcon |Josh Hasler |Michael Kurzer

On December 8, 2023, representatives of the European Council and the European Parliament reached a provisional agreement on the EU’s Artificial Intelligence Act (“AI Act”). Although the final text of the AI Act remains subject to further revision by lawmakers and endorsement by member states’ representatives, the provisional agreement previews the expansive scope of the forthcoming regulations.

Dec 4, 2023 | jdsupra.com | Briana Falcon |Palmina Fava |Josh Hasler

On November 27, 2023, the New York State Department of Financial Services (“DFS”) and First American Title Insurance Company (“First American”) entered into a consent order1 that resolved litigation over First American’s cybersecurity practices. Though the associated fine ($1 million) was relatively small, the order serves as a reminder to all organizations that simply having cybersecurity policies and procedures in place is insufficient when they are not in fact implemented.

Nov 27, 2023 | velaw.com | Palmina Fava |Briana Falcon |Josh Hasler

Among other things, DFS cybersecurity regulations require DFS-regulated entities (“Covered Entities”), such as First American, to design a cybersecurity program that protects the confidentiality and integrity of information systems and the nonpublic information they contain.2 Covered Entities periodically must perform risk assessments and update their cybersecurity programs as necessary to address changes to the Covered Entities’ risks, information systems, nonpublic information, or business...