This site uses cookies to improve your experience. To help us insure we adhere to various privacy regulations, please select your country/region of residence. If you do not select a country, we will assume you are from the United States. Select your Cookie Settings or view our Privacy Policy and Terms of Use.
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Used for the proper function of the website
Used for monitoring website traffic and interactions
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Strictly Necessary: Used for the proper function of the website
Performance/Analytics: Used for monitoring website traffic and interactions
Step Two: The CCB does a compliance review of the filed claim to determine if the claim qualifies for the CCB. Others have dropped out because they did not pass the compliance review, the respondent opted out, or for other reasons). Mitrakos, 22-CCB-0035 , February 15, 2023, and Oppenheimer v. Prutton, 22-CCB-0045 , February 28, 2023.
On April 14, 2021, the New York State Department of Financial Services (the “DFS”) announced that its cyber enforcement action against National Securities Corporation (“National Securities”) has been resolved by a Consent Order that imposes a $3 million penalty. This is the latest step in the DFS’s very active cyber-enforcement agenda.
On April 26, 2022, the Division of Examinations (“EXAMS”) of the Securities and Exchange Commission (the “SEC”) issued a Risk Alert titled “ Investment Adviser MNPI Compliance Issues ” (“Risk Alert”) on the use of alternative data.
On March 3, 2021, the DFS reached its first full resolution under its Part 500 Cybersecurity Regulation , a Consent Order with Residential Mortgage Services that imposes a $1.5 Failure to satisfy various state breach notification obligations. Failure to satisfy various state breach notification obligations.
million fine against Austrian Post for channelling electronic data protection-related inquiries to a web form and not offering an additional email address, irrespective of the data subject option to also use non-electronic postal mail or customer service. These developments, and more, covered below. Standard Contractual Clauses).
Failure to comply with the HBNR can result in penalties of up to $51,744 per violation. However, the FTC’s 2021 policy statement and several recent enforcement actions that followed indicate the agency’s intent to expand the scope of the HBNR to: (a) treat as a breach of security so-called “unauthorized disclosures” (i.e.,
The ANPR’s questions also consider under what circumstances a failure to provide privacy protections to children and teenagers (e.g., In Part 1 of this Data Blog series, we provided an overview of the ANPR and the context for the FTC’s rulemaking process. social media, ad tech and the mobile app ecosystem).
Data protection & AI: In particular: (i) the French CNIL published its first set of guidance on GDPR compliance when developing AI tools; and (ii) the UK ICO issued a preliminary enforcement notice against Snap over its AI chatbot, alleging that Snap had not adequately assessed the privacy risks posed to child users of the tool.
Department of Justice (the “DOJ”) announced that Aerojet Rocketdyne (“Aerojet”), a California-based aerospace and defense contractor, agreed to pay $9 million to resolve allegations that it violated the False Claims Act (the “FCA”) by misrepresenting its compliance with cybersecurity requirements in federal government contracts.
In particular, the May 2021 ransomware attack against the Colonial Pipeline was a “watershed moment” that laid bare how cyber incidents can have rippling impacts on the American economy and people’s daily lives. Second, the U.S.
In addition to his regulatory strategy work, he developed a regulatory pathway for telehealth companies acquired in 2021. I am in the business of persuading investors or acquirers of early-stage ventures that the regulatory compliance concerns expressed by other lawyers are not a real problem — or that they are addressable.
The Automated Employment Decision Tool Law (“AEDT”) places compliance obligations on employers in New York City that use AI tools, rather than software vendors who create the tools. For companies subject to the AEDT, compliance obligations include: Conducting an Independent, Annual Bias Audit. What Does the AEDT Require?
Many recent laws essentially mirror the “protect the kids online” initiatives of the 1990s and early 2000s, all of which failed as unconstitutional. In 1996, Congress passed the Communications Decency Act (CDA) to restrict minors’ access to indecent and patently offensive content online.
Specifically, Penn State allegedly failed to meet cybersecurity requirements in federal government contracts, misrepresented compliance timelines and plans, and failed to use a qualified external cloud service provider. The underlying failures alleged in the settlement occurred between 2018 and 2023.
The Strategy demonstrates a strong commitment by the Administration to further enhance the country’s cybersecurity posture. The Strategy demonstrates a strong commitment by the Administration to further enhance the country’s cybersecurity posture. Early reaction to the Strategy is largely favorable.
We organize all of the trending information in your field so you don't have to. Join 5,000+ users and stay up to date on the latest articles your peers are reading.
You know about us, now we want to get to know you!
Let's personalize your content
Let's get even more personalized
We recognize your account from another site in our network, please click 'Send Email' below to continue with verifying your account and setting a password.
Let's personalize your content