Inside Privacy

NOVEMBER 14, 2023

Compliance periods for the newly finalized requirements in the Second Amendment will be phased over the next two years, as set forth in additional detail below. NYDFS also provided further context on its expectations for compliance in responding to public comments even where it did not make changes. See Section 500.17 (a). a)(2), 500.7,

Compliance 61

Compliance 61

Debevoise Data Blog

OCTOBER 30, 2024

In Part One of this two-part Debevoise Data Blog post, we go over the new cybersecurity requirements coming into effect in November and provide a few practical considerations that covered entities may want to consider as they evaluate their Part 500 compliance. To subscribe to the Data Blog, please click here.

Compliance 52

Compliance Time-tracking 52

Debevoise Data Blog

DECEMBER 16, 2024

Cross-functional ECDIS and Model governance group composed of representatives from key functional areas, including legal, compliance, risk management, product development, underwriting, actuarial, data science, marketing, and customer service, as applicable. After the gap analysis, insurers should consider developing a road map to compliance.

Compliance 52

Compliance e-records Court 52

Technology Law Dispatch

JUNE 30, 2023

ENISA highlights the effectiveness of cybersecurity certifications, such as ISO/IEC 15408 for ICT security assessment or ISO/IEC 18045 for Common Criteria evaluation, in ensuring compliance. Once published, there will be a period of 24 months before it becomes effective (estimated Q3/4 2025).

Data protection 88

Data protection Compliance 88

Debevoise Data Blog

DECEMBER 10, 2024

EU Digital Operational Resilience Act (DORA): Incident and Cyber Threat Reporting and Considerations for Incident Response Plans (May 13, 2024) In January 2025, the EUs Digital Operational Resilience Act will go into effect, imposing reporting requirements on financial institutions in the aftermath of cyberattacks.

Compliance 52

Compliance Due diligence Law Law 52

Clio

OCTOBER 8, 2024

Jack also announced exciting new Clio features for 2025, including automated workflows, custom reporting, and new payment methods. To cap off his exhilarating keynote, Jack revealed that ClioCon 2025 will take place in Boston, Massachusetts. Secure your tickets for ClioCon 2025 today! Get your 2025 ClioCon pass.

Time-tracking 59

Time-tracking Judge Law firm Data protection 59

Inside Privacy

DECEMBER 1, 2023

In terms of timing, the CRA will come into force over a phased transition period starting in late 2025. As with most recent European technology regulation, the CRA will come with the threat of high penalties for non-compliance – up to €15 million or 2.5% of global turnover.

Due diligence 65

Due diligence Software Compliance Law 65

CloudNine

NOVEMBER 15, 2024

These laws impact how mobile data is managed, collected, and preserved, emphasizing compliance and consumer rights. GDPR Implications: Payne warned that linked files stored overseas might trigger privacy compliance issues, especially under GDPR regulations.

Compliance 59

Compliance Attorney Court Litigator 59

Debevoise Data Blog

NOVEMBER 21, 2024

Cross-Functional Approach: Senior management should ensure that responsible staff from the business, risk, compliance and technology functions can effectively manage the LC’s adoption and implementation of AI LMs by possessing the relevant competence in AI, data science, model risk management, and domain expertise.

Compliance 52

Compliance Due diligence Law Law 52

Debevoise Data Blog

APRIL 20, 2023

This signals the likely increased regulatory expectation that Boards more closely oversee digital operational resilience-related risks than may currently be the case, including by ensuring, at a minimum, compliance with DORA’s varied and detailed technical and policy obligations. What is the “Management Body” ?

Compliance 52

Compliance e-records Hearing 52

Debevoise Data Blog

APRIL 20, 2023

This signals the likely increased regulatory expectation that Boards more closely oversee digital operational resilience-related risks than may currently be the case, including by ensuring, at a minimum, compliance with DORA’s varied and detailed technical and policy obligations. What is the “Management Body” ?

Compliance 52

Compliance e-records Hearing 52

MatterSuite

SEPTEMBER 4, 2023

Gartner experts expect legal departments to increase their spending on legal technology threefold by 2025. Organizations’ legal departments continually grapple with managing intricate matters, regulatory compliance, contracts, and numerous legal responsibilities. However, investing in data integration solutions is crucial.

Time-tracking 52

Time-tracking Compliance Case management Analytics 52

Debevoise Data Blog

NOVEMBER 14, 2023

The Second Amendment’s compliance requirements will take effect in phases. For legal and compliance teams, the new requirements on certification, risk assessments, and governance will call for cross-functional participation throughout the coming year as companies assess their compliance with NYDFS’s Cybersecurity Regulation.

Compliance 52

Compliance Failure-to-appear Time-tracking 52

Inside Privacy

DECEMBER 5, 2023

As with most recent European technology regulation, the Cyber Resilience Act will come with the threat of high penalties for non-compliance – up to €15 million or 2.5% of global turnover. What’s happening next?

Due diligence 65

Due diligence Compliance Law Law 65

Debevoise Data Blog

NOVEMBER 18, 2024

For some firms, compliance with the Circular will require a significant increase in their cybersecurity compliance budgets and the securing of additional resources for 2025 and beyond. Some companies may want to address this now as 2025 budgets are being finalized.

Intellectual Property 52

Intellectual Property Due diligence Compliance Machine learning 52

Debevoise Data Blog

DECEMBER 3, 2024

As such, even companies that do not do extensive business in California may wish to note what the Draft Regulations propose and consider moving towards compliance with the substance of these proposals. Plan for Integration. Under the proposed changes, members of management facilitate, review, and certify their understanding of the audit.

Compliance 52

Compliance Litigator Litigation Attorney 52

Inside Privacy

FEBRUARY 1, 2024

Transfers of Non-Personal Data Outside of the EU The Data Governance Act (which applies as of September 24, 2023), the Data Act (which will apply as of September 12, 2025), and the forthcoming European Health Data Space (which is still in draft form) contain restrictions on the transfer of non-personal data outside the EU.

Intellectual Property 72

Intellectual Property State law Court Compliance 72

Lawmatics

DECEMBER 5, 2023

In response, legal technology budgets are poised to triple by 2025, according to Gartner. These platforms prioritize data security and compliance with legal and ethical standards to protect sensitive client information. What is a Legal Tech Platform? Are you ready to grow your firm with Lawmatics? Sign up for a product demo today.

Legal tech 52

Legal tech Legal tech Client Intake Time-tracking 52

Debevoise Data Blog

AUGUST 12, 2024

NIS2 vs DORA The EU’s Digital Operational Resilience Act (“ DORA ”), which comes into force on 17 January 2025, imposes far-reaching operational resilience requirements and management oversight requirements on financial services firms – including banks, insurers and private equity firms – and their critical service providers.

Compliance 52

Compliance Software Law Law 52

Technology Law Dispatch

NOVEMBER 22, 2023

Category 1 service providers must keep records of compliance with their obligations, publish them, enable functionality within the services to empower users to control the content they are exposed to, and, if children are likely to access their services, comply with specific child safety duties.

Compliance 52

Compliance Data protection 52

Debevoise Data Blog

OCTOBER 31, 2023

This could impact financial firms who are considering using the EU AI Act as their ‘high watermark’ for AI regulatory and governance compliance, who will have to accommodate any UK-specific requirements in their compliance programmes. The UK Financial Authorities could look to such existing resources when developing future guidance.

Compliance 52

Compliance Due diligence Machine learning Data protection 52

Lawmatics

FEBRUARY 13, 2024

Cybersecurity and privacy compliance: With the increasing reliance on digital tools, lawyers will need to focus more on cybersecurity and privacy issues. Ensure the future of your law firm with Lawmatics According to Gartner research , legal departments will likely triple their investments in legal technology by 2025.

Lawyer 52

Lawyer Client Intake Time-tracking Document automation 52

Simple Legal

FEBRUARY 15, 2023

By 2025, a whopping 100% of all contract life cycle management (CLM) tools will rely on AI to help with scanning content in contracts. The answer is clear: investing in a tool with proper security features and up-to-date compliance regulations not only prevents catastrophe but can also save you money in the long run.

Time-tracking 55

Time-tracking Legal tech Legal tech Machine learning 55

Debevoise Data Blog

MAY 23, 2022

Here, we highlight key aspects of the CTPA with a focus on the provisions that companies should consider in their compliance preparations. The CTPA bolsters opt-out rights by requiring controllers to recognize a global opt-out preference by January 1, 2025. CTPA § 6(e)(1)(A)(ii). The global opt-out preference signal is not new.

Law 40

Law Law Compliance Attorney 40

Debevoise Data Blog

NOVEMBER 21, 2022

Our key takeaways are: For financial services firms – determine if you are covered as a “financial entity” and, if so, begin charting a path to compliance: it is likely to be a resource-intensive undertaking and one which demands ongoing engagement from across the business, including management. What are the penalties for non-compliance?

Compliance 40

Compliance Due diligence Analytics Software 40

Ikigai Law

MAY 29, 2023

The National Council of Applied Economic Research and Confederation of Indian Industry in their report titled ‘Building India’s Export Competitiveness in Electronics–2025-26’ called for easing regulations for investments from China. [iv] Which party would bear the cost of compliance?

Compliance 52

Compliance 52

Lawmatics

DECEMBER 27, 2023

7 Regulatory compliance Legal tech addresses the growing complexity of regulatory compliance by offering solutions that help businesses stay updated and compliant with evolving requirements. 8 Legal analytics Data analytics in the legal field provides insights into case outcomes, litigation trends, and legal strategy optimization.

Legal technology 52

Legal technology Legal technology Dispute resolution Machine learning 52

Debevoise Data Blog

FEBRUARY 22, 2024

Notably, the next UK General Election will take place before the end of January 2025 and, depending on the outcome, a new government could adopt an entirely different AI strategy. For the time being though, five key takeaways are: Individual UK regulators will oversee AI within their respective domains.

Data protection 52

Data protection Law Law Compliance 52

Debevoise Data Blog

APRIL 29, 2022

The UCPA is set to be reviewed by the attorney general who must submit a report to the legislature by July 1, 2025. The UCPA, effective on December 31, 2023, is largely consistent with other comprehensive state privacy laws, but includes several key differences.

Law 52

Law Law Data protection Attorney 52

Debevoise Data Blog

JANUARY 25, 2024

They are also reminded of their obligation to maintain appropriate technical and organisational measures in relation to their data processing, and may wish to review their compliance with these measures. The costs of monitoring in compliance with DORA must be borne by the critical third-party IT providers, not the authorities.

Data protection 40

Data protection Court e-records Compliance 40

Debevoise Data Blog

JANUARY 13, 2025

Despite the busy 2024 litigation year against companies offering AI platforms in 2024, significant intellectual property questions remain unanswered as the calendar turns to 2025. 2025 may bring some clarity to the legal status of AI, including through highly anticipated guidance from the U.S. Ross Intelligence (Case No.

Litigation 52

Litigation Litigator Intellectual Property Defendant 52

Justia Legal Marketing & Technology blog

JANUARY 9, 2025

Enforcement is already effective for businesses without an MCC as of December 5, 2024, and begins for businesses with an MCC on January 22, 2025. FYI: The LSA Mobile App Is No Longer Supported [US] Google discontinued the LSA Mobile app on January 6th, 2025, as part of its effort to enhance the mobile web experience for Local Services Ads.

Law firm 83

Law firm Compliance Lawyer Law 83

Legal Talk Network

NOVEMBER 14, 2024

Peggy, a seasoned legal professional, shared her journey of building a family-run business focused on helping law firms manage finances, ensuring compliance, and optimizing cash flow. Legal Talk Network is already looking forward to ClioCon 2025 in Boston, Massachusetts! Will we see you there?

Law firm 52

Law firm Attorney Compliance Practice management 52

Ikigai Law

JUNE 1, 2023

Main Course Finding a way around the circuitous KYC maze The challenge of KYC compliance haunts every financial institution. But even if KYC norms are simplified and ambiguities are clarified – compliance with the letter of the law is not enough.REs’ internal KYC practices must be tailored to the unique levels of risk exposure that they face.

e-records 52

e-records Compliance Due diligence Law 52

Debevoise Data Blog

FEBRUARY 27, 2024

EU Data Act: Legislation has entered into force which will impose a range of new obligations on businesses from September 2025. These new obligations and protections will take effect from September 2025. However, it remains to be seen how this new office will interact with companies in the context of cyber incidents.

Data protection 52

Data protection Compliance e-records Time-tracking 52

Ikigai Law

JANUARY 25, 2023

SEBI is also expected to soon issue a framework for ESG rating providers – third party agencies that help determine ESG compliance of listed companies. She also said that SEBI will accommodate Indian companies’ need to comply with international standards on ESG, which is important to attract global funds.

Mediator 52

Mediator Software Compliance Law 52

Debevoise Data Blog

JULY 9, 2021

These changes add rights for consumers, and compliance obligations for businesses, that take the U.S. Sensitive Data Like the VCDPA, Colorado’s bill follows the European model of according enhanced rights, and imposing enhanced compliance obligations, for so-called “sensitive” data. This cure provision will expire on January 1, 2025.

Data protection 40

Data protection Attorney Compliance State law 40