2025 Due diligence Law 
Inside Privacy
DECEMBER 1, 2023
In terms of timing, the CRA will come into force over a phased transition period starting in late 2025. Conducting due diligence on imported PDEs. Covington’s Privacy and Cybersecurity Practice regularly advises on cybersecurity laws in Europe and elsewhere.
Debevoise Data Blog
NOVEMBER 18, 2024
There is also some overlap with the requirements in the EU AI Act and the Colorado AI Law , although the Circular is narrower (applying only to language models) and more prescriptive. Some companies may want to address this now as 2025 budgets are being finalized. To subscribe to the Data Blog, please click here.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Inside Privacy
DECEMBER 5, 2023
Although voluntary, the draft standards will also have consequences for European cybersecurity laws more broadly, including: NIS 2, Europe’s cybersecurity directive for essential infrastructure, which provides that member states may require entities to use products that are certified under the ECCS. of global turnover.
Debevoise Data Blog
NOVEMBER 21, 2024
For some firms, compliance with the Circular will require a significant increase in their compliance budgets and the securing of additional resources for 2025 and beyond. The authors would like to thank Debevoise Law Clerks Adam Shankman and Diane Bernabei for their contribution to this blog post.
Debevoise Data Blog
OCTOBER 20, 2024
The Guidance applies to entities that are covered by Part 500 ( i.e., entities with a license under the New York Banking Law, Insurance Law or Financial Services Law), but it provides valuable direction to all companies for managing the new cybersecurity risks associated with AI.
Debevoise Data Blog
OCTOBER 31, 2023
The UK’s Approach to AI Regulation As set out in the government’s white paper on AI , the UK, unlike the EU, does not intend to implement AI-specific laws or regulations. One possibility is for the UK Financial Regulators to introduce standardized AI due diligence requirements that firms must satisfy before they can adopt third-party tools.
Debevoise Data Blog
NOVEMBER 21, 2022
Covered entities must come into compliance with the provisions within 24 months after its entry into force, which depending on the date of publication will likely be December 2024 or January 2025. What are the key requirements for financial entities? DORA requires covered financial entities to comply with new rules in four key areas: 1.
Expert insights. Personalized for you.
65 
Let's personalize your content