As the use of artificial intelligence (AI) rapidly expands throughout the private sector and government, the Biden administration has published a report titled A Blueprint for an AI Bill of Rights. A summary is available at https://www.whitehouse.gov/ostp/ai-bill-of-rights/ and the full…
Blog Archives
SEC Proposes New Cybersecurity Disclosure Rules for Public Companies
On March 9, 2022, the SEC proposed new rules (“Proposed Rules”) that would expand cybersecurity disclosures applicable to public companies subject to the reporting requirements of the Securities Exchange Act of 1934 (“Exchange Act”). Existing SEC rules do not explicitly require cybersecurity…
Tagged with: breach, cyber security, cybersecurity, data breach, data security, public companies, rules
Posted in Regulations
Posted in Regulations
Federal Agencies Announce a New 36-Hour Cybersecurity Incident Rule Reporting Requirement
On November 18, 2021, the Office of the Comptroller of the Currency (“OCC”), the Board of Governors of the Federal Reserve System (“Board”), and the Federal Deposit Insurance Corporation (“FDIC”) (collectively, the “Agencies”) issued a new rule (the “Rule”) that…
Tagged with: banking, breach, cyber security, cybersecurity, data breach, data security, FDIC, federal reserve, notification, OCC, privacy
Posted in Data Breach, Policies and Procedures, Regulations, Standards
Posted in Data Breach, Policies and Procedures, Regulations, Standards
FTC’s Amended Safeguards Rule Imposes Significant Requirements on Covered Entities
On October 27, 2021, the Federal Trade Commission (“FTC”) announced new updates to the Gramm-Leach-Bliley Act (“GLBA”) by amending the Standards for Safeguarding Customer Information, known as the “Safeguards Rule,” and issuing a final rule (the “Final Rule”). The Safeguards…
Tagged with: data security, financial institutions, privacy, safeguards, Safeguards Rule, security practices
Posted in FTC, GLBA, Regulations
Posted in FTC, GLBA, Regulations
Cybersecurity Best Practices in the Remote-Working Environment
In the wake of the COVID-19 crisis, much of the workforce has shifted to working remotely, with many workers operating out of makeshift “offices” they created in their homes with little or no warning. Along with this remote work comes…
Tagged with: best practice, coronavirus, COVID-19, cybersecurity, data security, phishing, remote access
Posted in Data Security, Policies and Procedures, Privacy, Uncategorized
Posted in Data Security, Policies and Procedures, Privacy, Uncategorized
Eight Best Practices for Avoiding Data Breaches
As data breaches are on the rise, the old adage rings true: it’s not a question of if, but when. More companies are experiencing crippling breaches and the statistics are alarming: According to IBM Security’s Cost of a Data Breach…
Tagged with: attorneys general, data breach, data security, enforcement, FTC
Posted in Data Breach, Data Security, Policies and Procedures, Standards
Posted in Data Breach, Data Security, Policies and Procedures, Standards
Is Privacy Profitable?
It is evident that a company must invest in its privacy practices to meet legal requirements if it wants to avoid investigation costs and potential civil penalties. But can investment in privacy, data security, and data management bring benefits to…
Year To Date Changes To State Data Breach Notification Laws
With so much attention being paid to the impending California Consumer Privacy Act, it can be easy to forget that other states have privacy and data security laws too. And those laws change routinely, with potentially significant impacts on businesses. …
5 Ways in Which Your Company’s Privacy Policy is Insufficient
Well thought-out internal privacy policies and procedures are an essential part of any company’s information management program. These internal policies should not be confused with a company’s external privacy notice, which informs the company’s customers as to how it may…
Tagged with: data security, policies and procedures, privacy, regulations, risk management, security practices
Posted in Policies and Procedures, Privacy
Posted in Policies and Procedures, Privacy
Congress Holds Hearings on Privacy and Data Protection
With all of the hubbub swirling around Capitol Hill last week with the Michael Cohen hearings, you can’t be blamed if you missed the fact that two important congressional hearings on privacy and data protection took place as well, one…
Tagged with: cyber security, data security, hearings, legislation, privacy, regulations
Posted in Data Security, Legislation, Privacy
Posted in Data Security, Legislation, Privacy
