-
Nov 20, 2024 | 
jdsupra.com | Kristen Bartolotta |Kimberly Peretti
On November 14, 2024, the Department of Homeland Security (“DHS”) announced a set of voluntary recommendations called the “Roles and Responsibilities Framework for Artificial Intelligence in Critical Infrastructure” (“Framework”). Recognizing the severe consequences associated with disruption to the nation’s critical infrastructure, DHS released the framework to address certain risks associated with the use of AI across critical infrastructure sectors.
-
Oct 29, 2024 | 
jdsupra.com | Kristen Bartolotta |Katherine Doty Hanniford
The SEC has released its Examination Priorities: Fiscal Year 2025 (“Examination Priorities”), which may be a useful roadmap to SEC-registered investment advisers, exchanges, and other entities subject to routine examination by the SEC Division of Examinations (“EXAMS”).
-
Oct 21, 2024 | 
jdsupra.com | Kristen Bartolotta
On October 15, 2024, the Cyber Security Agency of Singapore (“CSA”) published Guidelines on Securing AI Systems (the “Guidelines”) alongside a Companion Guide for Securing AI Systems (the “Companion Guide”), which is intended to serve as support for the Guidelines.
-
Oct 21, 2024 | 
jdsupra.com | Kristen Bartolotta |Kelly Hagedorn
In the July 2024 King’s Speech, the UK government announced its intention to introduce a Cyber Security and Resilience Bill (the “Bill”) to improve the UK’s cyber defenses and protect essential public services. The announcement comes as companies and countries increasingly face attacks by cyber criminals and state actors, sometimes disrupting public services and infrastructure.
-
Aug 16, 2024 | 
jdsupra.com | Alysa Austin |Kristen Bartolotta |Kathleen Benway
The revamped Health Breach Notification Rule by the Federal Trade Commission (FTC) took effect on July 29, 2024, expanding consumer privacy protections to the users of online health platforms and health and wellness apps. Our Consumer Protection/FTC Team digs into the rule’s impact on the digital health sector.
-
Jun 27, 2024 | 
jdsupra.com | Kristen Bartolotta |Kellen S. Dwyer
On Monday, June 17, 2024, the Department of Justice (DOJ) announced a settlement in which two U.S. based consulting companies agreed to pay a combined total of $11.3 million to resolve allegations that they violated the False Claims Act (FCA) by failing to comply with cybersecurity requirements in government contracts.
-
Apr 8, 2024 | 
jdsupra.com | Kristen Bartolotta |Kellen S. Dwyer |Kimberly Peretti
On March 27, 2024, the Cybersecurity and Infrastructure Security Agency (CISA) published a notice of proposed rulemaking (NPRM) implementing the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA). For additional background on CIRCIA, see our prior advisory. CISA is required to issue a final rule by October 4, 2025. Who is required to report covered cyber incidents?
-
Dec 19, 2023 | 
jdsupra.com | Kristen Bartolotta |Katherine Doty Hanniford |Ashley Miller
After a three-year investigation/enforcement action by the New York Department of Financial Services (“NYDFS”), NYDFS entered into a Consent Order with a large title insurer (the “Company”) for its violation of NYDFS’s Cybersecurity Regulation (23 NYCRR Part 500) (the “Regulation”), specifically, its failure to protect non-public information (“NPI”).
-
Nov 29, 2023 | 
jdsupra.com | Kristen Bartolotta |Lance Taubin
On December 8, 2023, the California Privacy Protection Agency (CPPA) will hold a board meeting seeking public comment on various privacy regulations. The meeting, which will take place on Zoom, will cover several topics listed in its published agenda. The New CPRA Rules Subcommittee will provide an update and present on the Draft Regulations on Automated Decision-making Technology, Risk Assessments, and Cybersecurity Audits.
-
Oct 27, 2023 | 
mondaq.com | Kimberly Peretti |Lance Taubin |Kristen Bartolotta
At the end of September 2023, the Cyberspace Administration of
China (CAC) released draft regulations (see the unofficial English translation) regulating the
cross-border flow of personal information and important data out of
the Peoples Republic of China (PRC).
