This site uses cookies to improve your experience. To help us insure we adhere to various privacy regulations, please select your country/region of residence. If you do not select a country, we will assume you are from the United States. Select your Cookie Settings or view our Privacy Policy and Terms of Use.
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Used for the proper function of the website
Used for monitoring website traffic and interactions
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Strictly Necessary: Used for the proper function of the website
Performance/Analytics: Used for monitoring website traffic and interactions
ICO guidance on management of employment records : The ICO published guidance for employers when managing employee personal data. What to do : Businesses who use or distribute AI may wish to consider these guidelines when reviewing their compliance with the EU AI Acts prohibitions. Spanish Telecomm provider fined 1.2
Third – party risk management : Developing ways to manage compliance risks associated with the deployment of third-party foundational models and the use of third-party software that may have Gen AI embedded therein. Consider also organizing these risks into standard risks ( e., To subscribe to the Data Blog, please click here.
Cross-functional ECDIS and Model governance group composed of representatives from key functional areas, including legal, compliance, risk management, product development, underwriting, actuarial, data science, marketing, and customer service, as applicable.
By guest blogger Elizabeth Townsend Gard , John E. Step Two: The CCB does a compliance review of the filed claim to determine if the claim qualifies for the CCB. Others have dropped out because they did not pass the compliance review, the respondent opted out, or for other reasons). This is done by a staff attorney.
This webcast covered: Various approaches to adopting Generative AI, including bans, licenses, and pilot programs; Examples of generally permitted and generally prohibited use cases; Governance over and compliance with Generative AI policies and how that fits into larger structures.
Managing a law firm requires more than overseeing cases and delegating tasksit demands a strategic approach that balances client expectations, regulatory compliance, and operational efficiency. This includes financial management, client communication, human resources, compliance, marketing, and technology integration.
This webcast will cover: Various approaches to adopting Generative AI, including bans, licenses, and pilot programs; Examples of generally permitted and generally prohibited use cases; Governance over and compliance with Generative AI policies and how that fits into larger structures. To register to attend the live webcast, please click here.
If a data breach occurs, businesses may wish to take steps to rectify it and prevent recurrence and maintain a record of its response. What to do : Businesses may want to start work to align ahead of the go live date, given the challenges of retrofitting compliance. To subscribe to the Data Blog, please click here.
This blog post explores key considerations and recommendations for attaining eDiscovery excellence. Communicate new policies to all employees and ensure compliance. These experts possess specialized knowledge and experience, ensuring compliance and leveraging advanced technologies.
In this blog, we will delve into the exciting world of artificial intelligence. Document Management Law firms are moving away from traditional ways of keeping and recording documents. E-Discovery E-discovery is a crucial part of the legal industry. With the help of AI technologies, lawyers can conduct E-discovery.
To sign up for the on-demand recording, please click here. The cover art used in this blog post was generated by DALL-E. To read our thoughts on the Final Circular, click here. To view previous webcasts, click here.
This webcast covered: The SEC’s proposed cybersecurity rules for RIAs and BDs and S-P amendments Lessons learned from recent SEC cybersecurity exams and enforcement trends Getting ready for compliance with the rules If you would like to listen to the on-demand recording, please click here.
To register to receive the on-demand recording, please click here. The cover art used in this blog post was generated by DALL-E. The cover art used in this blog post was generated by DALL-E. To attend the live webcast, please click here.
For more information about the Proposed Rule, see our recent Debevoise Data Blog post. If you are unable to join via Webcast, please click here to register to receive the recording only. To see our previous blog posts about CISA, please click here. To subscribe to our Data Blog, please click here.
The PRA strongly criticised Wyelands’ lack of record-keeping policies and procedures to manage the use of WhatsApp communications, which the PRA found had prevented the bank’s Board and Risk function from effectively scrutinising transactions, as well as hindering the PRA’s supervision and investigation activities.
Get free e-book If youve been proactively working to grow your law firm , you know firsthand that the road to business success is fraught with challenges. If someone selects one of your blogs on the search engine results page (SERP) or clicks your ad, theyll be directed to your website.
As reported by Cheryl Miller in The Recorder , Assemblyman Mark Stone, D-Scotts Valley, and Sen. legal tech companies go public: alternative legal services provider LegalZoom (Nasdaq:LZ), legal technology company Intapp (Nasdaq:INTA), and e-discovery company DISCO (NYSE:LAW). Also driving this, I believe, is the e-payments factor.
Actions not words The last word is cautionary because I have seen well-written contracts, policies, or processes ignored once the project kicks off and conflicts escalate into litigation in record time. Another common pitfall is looking at dispute resolution as transactional or as a compliance “tick the box” process. Currency 2023.
Topics included: The history and context of DORA; Management obligations and the role of the Board; Incident reporting, operational resilience testing, and third-party risk management requirements; and Building towards compliance. If you would like to hear the recording for the webcast it can be accessed here.
Here are our highlights: European Commission adopts new Standard Contractual Clauses What happened : As reported in our blog post , the European Commission adopted its new Standard Contractual Clauses (“SCCs”) for the cross-border transfer of personal data from the EEA to “third countries”.
This post focuses on how to prepare for compliance with these new SEC rules, which Debevoise’s Data Strategy and Security and White Collar and Regulatory Defense Practices will discuss in depth in our March 21 webcast on the topic.
Integrating advanced features like live chat or e-commerce functionality can range from $1,500 to $5,000 or more, depending on the complexity and customization required. A typical law firm site might include a home page, about us, practice areas, attorney profiles, blog, and contact us. Number of pages. Absolutely.
Both increased regulatory scrutiny over AI use and record-breaking whistleblower activity has set the stage for an escalation of AI whistleblower-related enforcement. 3] Fiscal year (“FY”) 2022 and 2023 were each record-setting years for the SEC’s whistleblower program. To subscribe to the Data Blog, please click here.
So there’s corporate and IP and employment and all of that, and our own internal privacy compliance as well. And we saw at the time of recording this just last week, a very popular video communications tool, have an issue that arose around how they were processing data are how they stated they were processing data for their AI systems.
While these are necessary to help reduce complacency towards internal data protection compliance and ensure organisations actively work to reduce their exposure, it isn’t always easy for companies to align. In the case of e-discovery , for example, artificial intelligence is already being leveraged to great effect.
5 at 4 (“[A]ddresses provided on the e-commerce stores indicate that the registrants are in China and other neighboring countries.”). Without access to any of the other records that had been sealed, Defendants could neither ensure their compliance with the TRO nor respond to Plaintiff’s arguments in opposing its extension.”
Firms will have either 18 or 24 months (depending on size) from the date of publication in the Federal Register to come into compliance. We discuss Reg S-P’s new and expanded requirements, as well as considerations for compliance, below. a)(5).” §§ 240.17a-4(e)(14(v) 240.17ad-7(k)(5), 270.31a-1(b)(13)(v), 275.204-2(a)(25)(v).
This blog post summarises the complexities of the EU legislative process to explain the current status of, and next steps for, the draft EU AI Act. Member States will be required to designate AI oversight authorities to ensure compliance with the new regulations. Limited risk systems.
Last month, we wrote about how many companies probably need a policy for Generative AI tools like ChatGPT , Bard and Claud e (which we collectively refer to as “ChatGPT”). Recording the Input : Documenting and maintaining a record of the inputs for that specific use case that generated the corresponding outputs.
Third country data transfers : Businesses that transfer personal data outside of the EEA may want to review their transfer mechanisms in light of new guidance on the EU and South East Asia SCCs, and the DPC’s record-breaking €1.2 82 (see our May 2021 , August 2021 , and October 2022 blog posts for previous developments).
Reg S-ID Policies and Procedures : In connection with such exams, EXAMS will consider staff training regarding Regulation S-ID (the Identity Theft Red Flags Rule) and the adequacy of policies and procedures to protect customer records and information. To subscribe to the Data Blog, please click here.
This signals the likely increased regulatory expectation that Boards more closely oversee digital operational resilience-related risks than may currently be the case, including by ensuring, at a minimum, compliance with DORA’s varied and detailed technical and policy obligations. To subscribe to the Data Blog, please click here.
This signals the likely increased regulatory expectation that Boards more closely oversee digital operational resilience-related risks than may currently be the case, including by ensuring, at a minimum, compliance with DORA’s varied and detailed technical and policy obligations. To subscribe to the Data Blog, please click here.
In this blog post, we outline eight questions businesses may want to ask when developing or adopting new Generative AI tools or when considering new use cases involving GDPR-covered data. Consider and document your lawful basis before using personal data, including by updating your Record of Processing Activities. What can you do?
In this blog post, we will delve into the core features of ELM software and explore how it can significantly enhance the ROI for in-house legal teams. By leveraging predefined templates and clauses, legal professionals can expedite the drafting process while maintaining consistency and compliance.
The DPA investigated the transfers following press reports, and found that the company had breached the GDPR by: Not having an appropriate data processing agreement in place; Failing to perform a risk assessment for the engagement; and Not having a lawful basis for transferring personal data outside the EEA to China ( e.
This blog post explores key considerations and recommendations for attaining eDiscovery excellence. Communicate new policies to all employees and ensure compliance. These experts possess specialized knowledge and experience, ensuring compliance and leveraging advanced technologies.
An overview and summary of the law is on our blog. It only covers ‘digital’ data, not offline records. Processing means collecting, recording, structuring, storing, sharing, or any other automated action on the data. What data is covered? Personal data, i.e., data about an individual that can identify them. Who is affected?
Guidance on AI and data protection: Consolidating prior advice from various German DPAs on generative AI and data protection, the DSK has published guidance on the development, implementation and deployment of generative AI systems in compliance with the GDPR. To subscribe to the Data Blog, please click here. 5(1)(a) and 6.
designed to enhance your e-discovery workflows with powerful new features and improvements. Explore these new features today and experience the future of e-discovery! Aviator Review also helps to control the cost of e-discovery projects by providing users with a cost estimate for each selected data set before they run it.
The sheer amount of serial change to Chinese law adds to compliance challenges. 11 Security and Compliance Personal Information Processors must take measures to ensure the safety of PI, for example (but not limited to), creating internal procedures and protocols, and conducting periodic compliance audits, etc.
The fines follow non-compliance notices CNIL served to 60 organisations that did not allow users to refuse cookies as easily as to accept them. Intended to reflect a “minimum threshold” for compliance with the GDPR and ePrivacy Directive, as implemented in the EU Member States, the report emphasises the need for informed consent from users.
Data protection & AI: In particular: (i) the French CNIL published its first set of guidance on GDPR compliance when developing AI tools; and (ii) the UK ICO issued a preliminary enforcement notice against Snap over its AI chatbot, alleging that Snap had not adequately assessed the privacy risks posed to child users of the tool.
Dessert: sweet news about e-RUPI opening new doors for PPI issuers. For instance, it refused to lift ban on loading of e-wallets through credit lines. In this context, a pertinent example is a legal challenge that e-Bay, a leading e-commerce business faced. e-RUPI is, however, purpose specific.
We organize all of the trending information in your field so you don't have to. Join 5,000+ users and stay up to date on the latest articles your peers are reading.
You know about us, now we want to get to know you!
Let's personalize your content
Let's get even more personalized
We recognize your account from another site in our network, please click 'Send Email' below to continue with verifying your account and setting a password.
Let's personalize your content