Remove 2022 Remove Compliance Remove State law
article thumbnail

NIS2: Revised EU Cyber Rules for Critical Infrastructure

Debevoise Data Blog

On 10 November 2022, the European Parliament approved the second network and information systems directive (“NIS2”). In this Debevoise Data Blog post, we explore who NIS2 will affect, its key provisions and steps that businesses can consider to enhance their compliance programs in anticipation of the changes.

article thumbnail

The FTC’s Proposed Rulemaking Part 3 — Key Data Security Takeaways

Debevoise Data Blog

The ANPR was published in the Federal Register on August 22, 2022 and has a comment period that ends in 60 days on October 21, 2022. Additionally, on August, 29, 2022, the FTC released the final agenda for its September 8, 2022 Commercial Surveillance and Data Security Public Forum seeking public comment on the ANPR.

professionals

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Getting Ready for 2023: What Companies Can Do Now to Prepare for New Privacy Laws

Debevoise Data Blog

These developments have companies understandably concerned about complying with a patchwork of state laws. This means that businesses must be prepared to respond to consumer requests based on information collected on or after January 1, 2022. In addition, the Colorado Privacy Act (“ColoPA”) takes effect on July 1, 2023.

article thumbnail

European Data Protection Roundup – November 2023

Debevoise Data Blog

The intersection between GDPR compliance and AI has been the subject of detailed analysis in a previous blog post. Under EU law, vehicle manufacturers are legally obliged to provide certain third parties, such as repairers and spare parts distributors, with the necessary data to repair and maintain vehicles. UK and U.S.

article thumbnail

Connecticut’s Next Generation Data Privacy Law

Debevoise Data Blog

Connecticut’s Governor signed the state’s comprehensive privacy law into effect on May 10, 2022, adding yet another category of state privacy law. Here, we highlight key aspects of the CTPA with a focus on the provisions that companies should consider in their compliance preparations. CTPA § 4(b).

Law 40
article thumbnail

Utah Joins the Comprehensive State Privacy Law Club

Debevoise Data Blog

On March 24, 2022, Utah enacted a comprehensive consumer privacy law, the Utah Consumer Privacy Act (“UCPA”). The UCPA, effective on December 31, 2023, is largely consistent with other comprehensive state privacy laws, but includes several key differences.

Law 52
article thumbnail

Cybersecurity in the Remote Work Era: AI, Employees and an Integrated Defense – With SessionGuardian’s Jordan Ellington and Oren Leib, and Katten’s Trisha Sircar (TGIR Ep. 211)

3 Geeks and a Law Blog

He announces SessionGuardian will offer free CLE courses on cybersecurity awareness and compliance. Firms should look beyond check-the-box compliance to make privacy and security central in their culture. One out of every 40 of those attacks targeted a law firm or insurance carrier, and more than a quarter of law firms and a 2022.

Law firm 189