2025 Due diligence Law 
Inside Privacy
DECEMBER 5, 2023
Although voluntary, the draft standards will also have consequences for European cybersecurity laws more broadly, including: NIS 2, Europe’s cybersecurity directive for essential infrastructure, which provides that member states may require entities to use products that are certified under the ECCS. of global turnover.
Debevoise Data Blog
JANUARY 30, 2025
Whereas the Consent Order has a 180-day implementation deadline, the AG Settlement requires full implementation within one year: by October 9, 2025. Likewise, state regulators in the AG Settlement cited their general consumer protection and data breach notification laws. The AG Settlement also featured a 20-year term.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Debevoise Data Blog
OCTOBER 20, 2024
The Guidance applies to entities that are covered by Part 500 ( i.e., entities with a license under the New York Banking Law, Insurance Law or Financial Services Law), but it provides valuable direction to all companies for managing the new cybersecurity risks associated with AI.
Debevoise Data Blog
NOVEMBER 21, 2024
For some firms, compliance with the Circular will require a significant increase in their compliance budgets and the securing of additional resources for 2025 and beyond. The authors would like to thank Debevoise Law Clerks Adam Shankman and Diane Bernabei for their contribution to this blog post.
Debevoise Data Blog
NOVEMBER 21, 2022
Covered entities must come into compliance with the provisions within 24 months after its entry into force, which depending on the date of publication will likely be December 2024 or January 2025. What are the key requirements for financial entities? DORA requires covered financial entities to comply with new rules in four key areas: 1.
Debevoise Data Blog
FEBRUARY 28, 2025
The EU Digital Operational Resilience Act came into force on 17 January 2025. The UK ICO announced plans to assess the top 1,000 websites for compliance of with UK data protection laws, with a particular focus on whether companies are providing users meaningful choice on how their personal information is used. DORA becomes applicable.
Debevoise Data Blog
DECEMBER 10, 2024
In this post, we discuss how companies can comply with NYDFSs current approach by establishing internal governance committees, conducting a gap assessment against existing controls and standardizing due diligence processes, among other practical tips.
Expert insights. Personalized for you.
65 
Let's personalize your content