Inside Privacy

DECEMBER 1, 2023

In terms of timing, the CRA will come into force over a phased transition period starting in late 2025. The CRA will impose a range of obligations for manufacturers and importers of “products with digital elements” (“PDEs”) – a category which is defined broadly to that include both hardware and software products.

Due diligence 65

Due diligence Software Compliance Law 65

Debevoise Data Blog

NOVEMBER 18, 2024

Supply Chain Risks : Where an LC’s development and deployment of a Third-Party provider’s AI LM is undertaken with the use of the Third-Party provider’s data or software, the LC should assess supply chain vulnerabilities as well as data leakage risk at each component of the LC’s AI LM architecture and apply stringent cybersecurity controls.

Intellectual Property 52

Intellectual Property Due diligence Compliance Machine learning 52

Debevoise Data Blog

OCTOBER 20, 2024

Third-Party Service Provider and Vendor Management The NYDFS “strongly” recommends that due diligence of third-party service providers should include diligence on the AI-related risks they pose to themselves and to the covered entities.

Intellectual Property 52

Intellectual Property Due diligence Machine learning Defendant 52

Debevoise Data Blog

NOVEMBER 21, 2022

Covered entities must come into compliance with the provisions within 24 months after its entry into force, which depending on the date of publication will likely be December 2024 or January 2025. What are the key requirements for financial entities? DORA requires covered financial entities to comply with new rules in four key areas: 1.

Compliance 52

Compliance Due diligence Analytics Software 52