2025 Due diligence Law 
Inside Privacy
DECEMBER 1, 2023
In terms of timing, the CRA will come into force over a phased transition period starting in late 2025. Conducting due diligence on imported PDEs. Covington’s Privacy and Cybersecurity Practice regularly advises on cybersecurity laws in Europe and elsewhere.
Debevoise Data Blog
DECEMBER 10, 2024
In this post, we discuss how companies can comply with NYDFSs current approach by establishing internal governance committees, conducting a gap assessment against existing controls and standardizing due diligence processes, among other practical tips.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Inside Privacy
DECEMBER 5, 2023
Although voluntary, the draft standards will also have consequences for European cybersecurity laws more broadly, including: NIS 2, Europe’s cybersecurity directive for essential infrastructure, which provides that member states may require entities to use products that are certified under the ECCS. of global turnover.
Debevoise Data Blog
NOVEMBER 18, 2024
There is also some overlap with the requirements in the EU AI Act and the Colorado AI Law , although the Circular is narrower (applying only to language models) and more prescriptive. Some companies may want to address this now as 2025 budgets are being finalized. To subscribe to the Data Blog, please click here.
Debevoise Data Blog
OCTOBER 20, 2024
The Guidance applies to entities that are covered by Part 500 ( i.e., entities with a license under the New York Banking Law, Insurance Law or Financial Services Law), but it provides valuable direction to all companies for managing the new cybersecurity risks associated with AI.
Debevoise Data Blog
OCTOBER 31, 2023
The UK’s Approach to AI Regulation As set out in the government’s white paper on AI , the UK, unlike the EU, does not intend to implement AI-specific laws or regulations. One possibility is for the UK Financial Regulators to introduce standardized AI due diligence requirements that firms must satisfy before they can adopt third-party tools.
Debevoise Data Blog
NOVEMBER 21, 2024
For some firms, compliance with the Circular will require a significant increase in their compliance budgets and the securing of additional resources for 2025 and beyond. The authors would like to thank Debevoise Law Clerks Adam Shankman and Diane Bernabei for their contribution to this blog post.
Expert insights. Personalized for you.
65 
Let's personalize your content