Debevoise Data Blog

MARCH 7, 2023

To register to receive the on-demand recording, please click here. The cover art used in this blog post was generated by DALL-E. The cover art used in this blog post was generated by DALL-E. To attend the live webcast, please click here.

e-records 52

e-records Compliance 52

Debevoise Data Blog

APRIL 12, 2024

For more information about the Proposed Rule, see our recent Debevoise Data Blog post. If you are unable to join via Webcast, please click here to register to receive the recording only. To see our previous blog posts about CISA, please click here. To subscribe to our Data Blog, please click here.

e-records 52

e-records Compliance Law Law 52

Debevoise Data Blog

APRIL 14, 2023

The PRA strongly criticised Wyelands’ lack of record-keeping policies and procedures to manage the use of WhatsApp communications, which the PRA found had prevented the bank’s Board and Risk function from effectively scrutinising transactions, as well as hindering the PRA’s supervision and investigation activities.

e-records 52

e-records Compliance e-filing Data protection 52

LawSites

DECEMBER 29, 2021

As reported by Cheryl Miller in The Recorder , Assemblyman Mark Stone, D-Scotts Valley, and Sen. legal tech companies go public: alternative legal services provider LegalZoom (Nasdaq:LZ), legal technology company Intapp (Nasdaq:INTA), and e-discovery company DISCO (NYSE:LAW). Also driving this, I believe, is the e-payments factor.

Legal tech 145

Legal tech Legal tech Practice management e-filing 145

Debevoise Data Blog

JUNE 26, 2023

Topics included: The history and context of DORA; Management obligations and the role of the Board; Incident reporting, operational resilience testing, and third-party risk management requirements; and Building towards compliance. If you would like to hear the recording for the webcast it can be accessed here.

e-records 40

e-records Hearing Compliance 40

Debevoise Data Blog

JULY 20, 2021

Here are our highlights: European Commission adopts new Standard Contractual Clauses What happened : As reported in our blog post , the European Commission adopted its new Standard Contractual Clauses (“SCCs”) for the cross-border transfer of personal data from the EEA to “third countries”.

Data protection 52

Data protection e-filing Compliance e-records 52

Debevoise Data Blog

DECEMBER 16, 2024

Cross-functional ECDIS and Model governance group composed of representatives from key functional areas, including legal, compliance, risk management, product development, underwriting, actuarial, data science, marketing, and customer service, as applicable.

Compliance 52

Compliance e-records Court 52

Debevoise Data Blog

MARCH 12, 2023

This post focuses on how to prepare for compliance with these new SEC rules, which Debevoise’s Data Strategy and Security and White Collar and Regulatory Defense Practices will discuss in depth in our March 21 webcast on the topic.

e-records 52

e-records e-filing Compliance 52

Debevoise Data Blog

APRIL 24, 2024

Both increased regulatory scrutiny over AI use and record-breaking whistleblower activity has set the stage for an escalation of AI whistleblower-related enforcement. 3] Fiscal year (“FY”) 2022 and 2023 were each record-setting years for the SEC’s whistleblower program. To subscribe to the Data Blog, please click here.

e-records 52

e-records Federal law Compliance Prosecutor 52

3 Geeks and a Law Blog

SEPTEMBER 5, 2023

So there’s corporate and IP and employment and all of that, and our own internal privacy compliance as well. And we saw at the time of recording this just last week, a very popular video communications tool, have an issue that arose around how they were processing data are how they stated they were processing data for their AI systems.

Time-tracking 162

Time-tracking Hearing Compliance e-filing 162

Legal Tech Blog

DECEMBER 8, 2022

While these are necessary to help reduce complacency towards internal data protection compliance and ensure organisations actively work to reduce their exposure, it isn’t always easy for companies to align. In the case of e-discovery , for example, artificial intelligence is already being leveraged to great effect.

e-discovery 52

e-discovery Compliance Machine learning Due diligence 52

Eric Goldman

JANUARY 4, 2024

5 at 4 (“[A]ddresses provided on the e-commerce stores indicate that the registrants are in China and other neighboring countries.”). Without access to any of the other records that had been sealed, Defendants could neither ensure their compliance with the TRO nor respond to Plaintiff’s arguments in opposing its extension.”

Defendant 98

Defendant Judge Lawsuit e-filing 98

Debevoise Data Blog

MAY 17, 2024

Firms will have either 18 or 24 months (depending on size) from the date of publication in the Federal Register to come into compliance. We discuss Reg S-P’s new and expanded requirements, as well as considerations for compliance, below. a)(5).” §§ 240.17a-4(e)(14(v) 240.17ad-7(k)(5), 270.31a-1(b)(13)(v), 275.204-2(a)(25)(v).

e-records 52

e-records Compliance e-filing Due diligence 52

Debevoise Data Blog

NOVEMBER 29, 2023

This blog post summarises the complexities of the EU legislative process to explain the current status of, and next steps for, the draft EU AI Act. Member States will be required to designate AI oversight authorities to ensure compliance with the new regulations. Limited risk systems.

Compliance 52

Compliance Data protection e-records Law 52

MatterSuite

JANUARY 23, 2024

In this blog post, we will delve into the core features of ELM software and explore how it can significantly enhance the ROI for in-house legal teams. By leveraging predefined templates and clauses, legal professionals can expedite the drafting process while maintaining consistency and compliance.

Software 52

Software Time-tracking Compliance Analytics 52

Debevoise Data Blog

MARCH 20, 2023

Last month, we wrote about how many companies probably need a policy for Generative AI tools like ChatGPT , Bard and Claud e (which we collectively refer to as “ChatGPT”). Recording the Input : Documenting and maintaining a record of the inputs for that specific use case that generated the corresponding outputs.

e-records 52

e-records Intellectual Property Compliance 52

Colin S. Levy

SEPTEMBER 17, 2024

Actions not words The last word is cautionary because I have seen well-written contracts, policies, or processes ignored once the project kicks off and conflicts escalate into litigation in record time. Another common pitfall is looking at dispute resolution as transactional or as a compliance “tick the box” process. Currency 2023.

Dispute resolution 82

Dispute resolution Mediator Litigator Litigation 82

Debevoise Data Blog

OCTOBER 18, 2023

Reg S-ID Policies and Procedures : In connection with such exams, EXAMS will consider staff training regarding Regulation S-ID (the Identity Theft Red Flags Rule) and the adequacy of policies and procedures to protect customer records and information. To subscribe to the Data Blog, please click here.

e-records 40

e-records Compliance 40

Debevoise Data Blog

JUNE 8, 2023

Third country data transfers : Businesses that transfer personal data outside of the EEA may want to review their transfer mechanisms in light of new guidance on the EU and South East Asia SCCs, and the DPC’s record-breaking €1.2 82 (see our May 2021 , August 2021 , and October 2022 blog posts for previous developments).

Data protection 52

Data protection Compliance e-records Dispute resolution 52

Debevoise Data Blog

APRIL 20, 2023

This signals the likely increased regulatory expectation that Boards more closely oversee digital operational resilience-related risks than may currently be the case, including by ensuring, at a minimum, compliance with DORA’s varied and detailed technical and policy obligations. To subscribe to the Data Blog, please click here.

Compliance 52

Compliance e-records Hearing 52

Debevoise Data Blog

APRIL 20, 2023

This signals the likely increased regulatory expectation that Boards more closely oversee digital operational resilience-related risks than may currently be the case, including by ensuring, at a minimum, compliance with DORA’s varied and detailed technical and policy obligations. To subscribe to the Data Blog, please click here.

Compliance 52

Compliance e-records Hearing 52

Debevoise Data Blog

OCTOBER 10, 2023

In this blog post, we outline eight questions businesses may want to ask when developing or adopting new Generative AI tools or when considering new use cases involving GDPR-covered data. Consider and document your lawful basis before using personal data, including by updating your Record of Processing Activities. What can you do?

Data protection 52

Data protection e-records Compliance Law 52

Debevoise Data Blog

OCTOBER 12, 2021

The DPA investigated the transfers following press reports, and found that the company had breached the GDPR by: Not having an appropriate data processing agreement in place; Failing to perform a risk assessment for the engagement; and Not having a lawful basis for transferring personal data outside the EEA to China ( e.

Data protection 52

Data protection Failure-to-appear Compliance e-records 52

MatterSuite

JUNE 5, 2023

This blog post explores key considerations and recommendations for attaining eDiscovery excellence. Communicate new policies to all employees and ensure compliance. These experts possess specialized knowledge and experience, ensuring compliance and leveraging advanced technologies.

Lawyer 52

Lawyer Machine learning Compliance Analytics 52

Debevoise Data Blog

JUNE 27, 2024

Guidance on AI and data protection: Consolidating prior advice from various German DPAs on generative AI and data protection, the DSK has published guidance on the development, implementation and deployment of generative AI systems in compliance with the GDPR. To subscribe to the Data Blog, please click here. 5(1)(a) and 6.

Data protection 52

Data protection Software e-records Compliance 52

Ikigai Law

AUGUST 4, 2023

An overview and summary of the law is on our blog. It only covers ‘digital’ data, not offline records. Processing means collecting, recording, structuring, storing, sharing, or any other automated action on the data. What data is covered? Personal data, i.e., data about an individual that can identify them. Who is affected?

Data protection 52

Data protection Law Law e-records 52

OpenText

NOVEMBER 26, 2024

designed to enhance your e-discovery workflows with powerful new features and improvements. Explore these new features today and experience the future of e-discovery! Aviator Review also helps to control the cost of e-discovery projects by providing users with a cost estimate for each selected data set before they run it.

e-filing 59

e-filing Analytics Time-tracking e-discovery 59

Debevoise Data Blog

JANUARY 17, 2025

If a data breach occurs, businesses may wish to take steps to rectify it and prevent recurrence and maintain a record of its response. What to do : Businesses may want to start work to align ahead of the go live date, given the challenges of retrofitting compliance. To subscribe to the Data Blog, please click here.

Data protection 52

Data protection Compliance Court State law 52

Debevoise Data Blog

OCTOBER 11, 2021

The sheer amount of serial change to Chinese law adds to compliance challenges. 11 Security and Compliance Personal Information Processors must take measures to ensure the safety of PI, for example (but not limited to), creating internal procedures and protocols, and conducting periodic compliance audits, etc.

Law 52

Law Law e-records Compliance 52

Debevoise Data Blog

FEBRUARY 20, 2023

The fines follow non-compliance notices CNIL served to 60 organisations that did not allow users to refuse cookies as easily as to accept them. Intended to reflect a “minimum threshold” for compliance with the GDPR and ePrivacy Directive, as implemented in the EU Member States, the report emphasises the need for informed consent from users.

Data protection 52

Data protection Compliance e-records Court 52

Clio

SEPTEMBER 9, 2024

Integrating advanced features like live chat or e-commerce functionality can range from $1,500 to $5,000 or more, depending on the complexity and customization required. A typical law firm site might include a home page, about us, practice areas, attorney profiles, blog, and contact us. Number of pages. Absolutely.

Attorney 75

Attorney Law firm e-records Client Intake 75

Debevoise Data Blog

NOVEMBER 21, 2023

Data protection & AI: In particular: (i) the French CNIL published its first set of guidance on GDPR compliance when developing AI tools; and (ii) the UK ICO issued a preliminary enforcement notice against Snap over its AI chatbot, alleging that Snap had not adequately assessed the privacy risks posed to child users of the tool.

Data protection 52

Data protection Compliance Failure-to-appear e-records 52

Ikigai Law

JULY 4, 2023

Dessert: sweet news about e-RUPI opening new doors for PPI issuers. For instance, it refused to lift ban on loading of e-wallets through credit lines. In this context, a pertinent example is a legal challenge that e-Bay, a leading e-commerce business faced. e-RUPI is, however, purpose specific.

e-filing 52

e-filing e-records Court Law 52

Debevoise Data Blog

AUGUST 2, 2023

This post highlights key aspects of the MHMDA with a focus on net-new provisions that organizations should consider as they build out their privacy compliance programs. The MHMDA includes data exemptions for HIPAA, quality assurance testing, and health records governed by or created pursuant to other state and federal laws.

Law 52

Law Law e-records Time-tracking 52

Debevoise Data Blog

AUGUST 2, 2023

This post highlights key aspects of the MHMDA with a focus on net-new provisions that organizations should consider as they build out their privacy compliance programs. The MHMDA includes data exemptions for HIPAA, quality assurance testing, and health records governed by or created pursuant to other state and federal laws.

Law 52

Law Law e-records Time-tracking 52

Debevoise Data Blog

AUGUST 16, 2023

As outlined in our blog post , the decision allows businesses in Europe to transfer personal data to DPF-certified U.S. Once certified, compliance with the principles can be enforced under U.S. Take Three: New European adequacy decision gives green light to EU-U.S. Data Privacy Framework (the “DPF”).

Data protection 40

Data protection Analytics Compliance Time-tracking 40

Debevoise Data Blog

JANUARY 25, 2024

6, meaning that businesses may wish to review their records of processing activities to ensure that both are reflected. They are also reminded of their obligation to maintain appropriate technical and organisational measures in relation to their data processing, and may wish to review their compliance with these measures. 6 and Art.

Data protection 40

Data protection Court e-records Compliance 40