Remove Compliance Remove Definition Remove State law
article thumbnail

The SEC Adopts Significant Cybersecurity Amendments to Reg S-P

Debevoise Data Blog

Firms will have either 18 or 24 months (depending on size) from the date of publication in the Federal Register to come into compliance. We discuss Reg S-P’s new and expanded requirements, as well as considerations for compliance, below. A comparison of Amended Reg S-P to the Proposed Amendments is available here. 17 CFR § 248.30(a)(3).

article thumbnail

Virginia Enacts Direct-to-Consumer Genetic Privacy Law as Numerous Other States Introduce Similar Bills

Inside Privacy

These laws also contain exemptions related to clinical research and for PHI collected by a covered entity or business associate subject to HIPAA, and similarly exempt deidentified data, though we note the scope of each state laws’ exemptions are not identical.

Law 57
professionals

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

Face Forward Part 2: Proposed Legislation and Strategies for Compliant Use of Facial Recognition

Debevoise Data Blog

This would seem to eliminate not just the possibility of compliance-by-signage but also the possibility of online consent. This approach can be a hard sell for lawyers talking to their business-side clients, for whom being a compliance volunteer is rarely popular. Compliance. Has the company obtained those individuals’ consent?

article thumbnail

Connecticut’s Next Generation Data Privacy Law

Debevoise Data Blog

Here, we highlight key aspects of the CTPA with a focus on the provisions that companies should consider in their compliance preparations. We also provide an overview of the CTPA’s enforcement mechanisms and explain how the CTPA modifies prior laws’ safe harbor with a nod towards prosecutorial discretion. CTPA § 1(26). CTPA § 1(6).

Law 40
article thumbnail

Utah Joins the Comprehensive State Privacy Law Club

Debevoise Data Blog

Bottom Line : While the narrower scope of consumer rights under the UCPA may ease compliance burdens, companies will need to determine whether they will be able to take a standardized approach for offering consumer rights under the UCPA and State Privacy Laws, or whether they will need to address rights on a state-by-state basis.

Law 52
article thumbnail

Face Forward: Strategies for Complying with Facial Recognition Laws

Debevoise Data Blog

Illinois’ Biometric Information Privacy Act (“BIPA”) excludes both “digital photographs” and “information derived from” photographs from the definition of “biometric information.” State Laws Permitting but Regulating Collection and Use of Biometric Identifiers, including Facial Data.

Law 52
article thumbnail

Cybersecurity in the Remote Work Era: AI, Employees and an Integrated Defense – With SessionGuardian’s Jordan Ellington and Oren Leib, and Katten’s Trisha Sircar (TGIR Ep. 211)

3 Geeks and a Law Blog

He announces SessionGuardian will offer free CLE courses on cybersecurity awareness and compliance. Firms should look beyond check-the-box compliance to make privacy and security central in their culture. So I definitely think data. Not all, I believe only one or two state laws in the US require it.

Law firm 189