Lexology

SEC Report Reiterates Cybersecurity Implications for Internal Control Requirement

USA - October 17 2018 On October 16, 2018, the Securities and Exchange Commission (SEC) issued a report on the results of investigations made by the SEC’s Division of…

Connecticut Now Requires 24 months of Theft Mitigation Services in the Event of a Breach

USA - September 28 2018 Effective October 1, 2018, Connecticut has the most stringent requirement—24 months—for free mitigation services that must be provided to those…

ICYMI: A quick look at recent Privacy and Cybersecurity headlines

USA - September 14 2018 The bill (SB-327), if signed by Gov. Brown, will take effect on January 1, 2020. It is aimed at securing connected devices. The bill states that, “a…

Warner white paper floats far-ranging privacy proposals

USA - September 6 2018 The convergence of the General Data Protection Regulation and the investigation into Russian interference in the 2016 election has created a perfect…

CTIA Reveals Cybersecurity Certification for IoT Devices

USA - August 23 2018 CTIA, a trade association representing the wireless communications industry, recently announced a new cybersecurity certification program for IoT…

NYDFS Cybersecurity Deadline Approaching

USA - August 13 2018 The eighteen month transitional period under the New York Department of Financial Services (NYDFS) Cybersecurity Requirements for Financial Services…

U.S. Treasury Recommends National Data Breach Standard

USA - August 7 2018 The U.S. Treasury recently released a report identifying improvements that would support nonbank financial institutions but also embrace innovation…

Updates to State Data Breach Laws

USA - July 20 2018 Personal information has become the prey of relentless poachers. In light of the influx of data breaches, state legislatures are taking action. Not…

NIST to Withdraw Outdated Cybersecurity Publications

USA - July 19 2018 On August 1, 2018, NIST will withdraw eleven SP 800 publications that are considered out of date. These publications will not be revised. According to…

How Direct Marketing is Impacted by GDPR and PECR

European Union, United Kingdom - July 16 2018 As previously discussed, the General Data Policy Regulations (GDPR) created heightened consent standards for companies processing and sharing personal…