2025 Compliance Due diligence 
Inside Privacy
DECEMBER 5, 2023
As with most recent European technology regulation, the Cyber Resilience Act will come with the threat of high penalties for non-compliance – up to €15 million or 2.5% of global turnover. What’s happening next?
Debevoise Data Blog
JANUARY 30, 2025
In this blog post, we discuss key provisions in the Consent Order, which not only underscore the FTCs expectations for (and enforcement of) reasonable security practices in the absence of specific regulations but also highlight the added compliance burden that companies may face in an enforcement action. For instance, the U.S.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Debevoise Data Blog
NOVEMBER 21, 2024
Cross-Functional Approach: Senior management should ensure that responsible staff from the business, risk, compliance and technology functions can effectively manage the LC’s adoption and implementation of AI LMs by possessing the relevant competence in AI, data science, model risk management, and domain expertise.
Debevoise Data Blog
NOVEMBER 21, 2022
Our key takeaways are: For financial services firms – determine if you are covered as a “financial entity” and, if so, begin charting a path to compliance: it is likely to be a resource-intensive undertaking and one which demands ongoing engagement from across the business, including management. What are the penalties for non-compliance?
Debevoise Data Blog
NOVEMBER 18, 2024
For some firms, compliance with the Circular will require a significant increase in their cybersecurity compliance budgets and the securing of additional resources for 2025 and beyond. Some companies may want to address this now as 2025 budgets are being finalized.
Debevoise Data Blog
DECEMBER 10, 2024
In this post, we discuss how companies can comply with NYDFSs current approach by establishing internal governance committees, conducting a gap assessment against existing controls and standardizing due diligence processes, among other practical tips.
Inside Privacy
DECEMBER 1, 2023
In terms of timing, the CRA will come into force over a phased transition period starting in late 2025. Conducting due diligence on imported PDEs. As with most recent European technology regulation, the CRA will come with the threat of high penalties for non-compliance – up to €15 million or 2.5% of global turnover.
Expert insights. Personalized for you.
65 
Let's personalize your content