Remove Compliance Remove Definition Remove State law
article thumbnail

Cybersecurity in the Remote Work Era: AI, Employees and an Integrated Defense – With SessionGuardian’s Jordan Ellington and Oren Leib, and Katten’s Trisha Sircar (TGIR Ep. 211)

3 Geeks and a Law Blog

He announces SessionGuardian will offer free CLE courses on cybersecurity awareness and compliance. Firms should look beyond check-the-box compliance to make privacy and security central in their culture. So I definitely think data. Not all, I believe only one or two state laws in the US require it.

Law firm 189
article thumbnail

Observing the Black Box: Transcend’s Brandon Wiebe’s Insights into Governing Emerging AI Systems (TGIR Ep. 218)

3 Geeks and a Law Blog

So there’s corporate and IP and employment and all of that, and our own internal privacy compliance as well. So that’s definitely a, you know, the automation is definitely something that helps uncover, you know, the, the not just the good data that’s out there. So it definitely has impact cross functionally as well.

professionals

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The SEC Adopts Significant Cybersecurity Amendments to Reg S-P

Debevoise Data Blog

Firms will have either 18 or 24 months (depending on size) from the date of publication in the Federal Register to come into compliance. We discuss Reg S-P’s new and expanded requirements, as well as considerations for compliance, below. A comparison of Amended Reg S-P to the Proposed Amendments is available here. 17 CFR § 248.30(a)(3).

article thumbnail

Virginia Enacts Direct-to-Consumer Genetic Privacy Law as Numerous Other States Introduce Similar Bills

Inside Privacy

These laws also contain exemptions related to clinical research and for PHI collected by a covered entity or business associate subject to HIPAA, and similarly exempt deidentified data, though we note the scope of each state laws’ exemptions are not identical.

Law 57
article thumbnail

Recently Enacted AI Law in Colorado: Yet Another Reason to Implement an AI Governance Program

Debevoise Data Blog

state law developments all reinforce the incentives for companies to adopt AI governance programs. Create a roadmap for compliance. The Law includes a list of technologies that are expressly excluded from the definition of high-risk AI systems, including, e.g., calculators, databases, spreadsheets, and databases.

Law 40
article thumbnail

European Data Protection Roundup – November 2023

Debevoise Data Blog

The intersection between GDPR compliance and AI has been the subject of detailed analysis in a previous blog post. Following concerns that ambiguities in the definitions gave rise to a risk of circumvention, the Guidelines clarified that: “Information” includes both non-personal and personal data, regardless of how it was stored and by whom.

article thumbnail

Face Forward Part 2: Proposed Legislation and Strategies for Compliant Use of Facial Recognition

Debevoise Data Blog

This would seem to eliminate not just the possibility of compliance-by-signage but also the possibility of online consent. This approach can be a hard sell for lawyers talking to their business-side clients, for whom being a compliance volunteer is rarely popular. Compliance. Has the company obtained those individuals’ consent?