Remove Compliance Remove Due diligence Remove State law
article thumbnail

The State of State Law Cybersecurity Requirements

Debevoise Data Blog

Almost everyone working in cybersecurity compliance is aware that each U.S. state has its own set of breach notification requirements. What is less known is that many of these states also impose substantive cybersecurity requirements. Emerging Themes of State Law Cybersecurity Requirements Taking all these U.S.

article thumbnail

The FTC’s Proposed Rulemaking Part 3 — Key Data Security Takeaways

Debevoise Data Blog

To prepare for potential FTC rulemaking regarding data security, businesses should continue to develop FTC compliance programs – including reasonable security safeguards and cybersecurity programs – by evaluating the FTC’s recent actions and guidance. In Part 3 of our Data Blog series, we focus on the FTC ANPR as it relates to data security.

professionals

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The SEC Adopts Significant Cybersecurity Amendments to Reg S-P

Debevoise Data Blog

Firms will have either 18 or 24 months (depending on size) from the date of publication in the Federal Register to come into compliance. We discuss Reg S-P’s new and expanded requirements, as well as considerations for compliance, below. Takeaways Review and Update Policies and Procedures for Upcoming Compliance Dates.

article thumbnail

Cybersecurity in the Remote Work Era: AI, Employees and an Integrated Defense – With SessionGuardian’s Jordan Ellington and Oren Leib, and Katten’s Trisha Sircar (TGIR Ep. 211)

3 Geeks and a Law Blog

Leib discusses some alarming cybersecurity statistics, including a 7% weekly increase in global cyber attacks and the fact that law firms and insurance companies face over 1,200 attacks per week on average. He announces SessionGuardian will offer free CLE courses on cybersecurity awareness and compliance. That’s an obvious one.

Law firm 189
article thumbnail

Cybersecurity in the Remote Work Era: AI, Employees and an Integrated Defense – With SessionGuardian’s Jordan Ellington and Oren Leib, and Katten’s Trisha Sircar (TGIR Ep. 211)

Legal Tech Monitor

Leib discusses some alarming cybersecurity statistics, including a 7% weekly increase in global cyber attacks and the fact that law firms and insurance companies face over 1,200 attacks per week on average. He announces SessionGuardian will offer free CLE courses on cybersecurity awareness and compliance. That’s an obvious one.

article thumbnail

California Restricts Insurers’ Use of AI and Big Data

Debevoise Data Blog

Due Diligence Requirements : The Bulletin states that before utilizing any data collection method, fraud algorithm or rating/underwriting or marketing tool, insurers “must conduct their own due diligence to ensure full compliance with all applicable laws.”

article thumbnail

Treasury’s Post-2024 RFI Report on AI in Financial Services – Uses, Opportunities, and Risks

Debevoise Data Blog

For internal uses, respondents emphasized the growing role of AI in compliance, risk management, and operations, with generative AI in particular enhancing tasks like report creation, data analysis, and detecting anomalies in anti-money laundering and sanctions compliance. Inconsistent State Laws.