News & Analysis as of September 20, 2024

Third-Party

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

Litigation Grows Around Website Technologies, With Focus on Sensitive Data

Wiley Rein LLP on 7/10/2024

Data privacy-related lawsuits have skyrocketed in recent years. Federal courts saw over 900 data privacy dockets in 2020 – but witnessed a surge to 1,767 dockets in 2023. At the halfway point in 2024, federal court data...more

Corporate Use of Third-Party Artificial Intelligence (AI) Tools

Society of Corporate Compliance and Ethics... on 2/22/2024

At the 2024 SCCE European Compliance & Ethics Institute, Segev Shani, Chief Compliance & Regulatory Officer at Neopharm Group will be leading the session “Corporate Use of Third-Party Artificial Intelligence (AI) Tools.” In...more

Data Privacy Week Series: Check Your Third-Party Agreements Against Internal Policies

Miller Nash LLP on 1/29/2024

In honor of Data Privacy Week, each day this week Miller Nash is releasing one of our top five recommendations for where businesses should focus their privacy compliance efforts in 2024. If you need assistance reviewing your...more

OCR and FTC Issue Joint Statement Warning Health Care Providers and App Developers About Use of Third Party Online Tracking...

Mintz - Privacy & Cybersecurity Viewpoints on 7/25/2023

Covered entities, business associates, and any entities that collect health information about consumers online should carefully review the latest joint letter from the Office for Civil Rights (OCR) and the Federal Trade...more

NIST’s AI Risk Management Framework Helps Businesses Address AI Risk

Foley & Lardner LLP on 7/6/2023

As we previously discussed, earlier this year the National Institute of Standards and Technology (NIST) launched the Trustworthy and Responsible AI Resource Center. Included in the AI Resource Center is NIST’s AI Risk...more

Dechert Cyber Bits - Issue 20

Dechert LLP on 9/16/2022

Pelosi Statement Dims the Lights on ADPPA - The prospects for the nation’s first comprehensive data privacy law, the American Data Privacy and Protection Act (the “ADPPA” or the “Bill”), dimmed after House Speaker Nancy...more

Construction Industry: Data Security Considerations

Jackson Lewis P.C. on 3/31/2022

No industry is immune to privacy and cybersecurity risks, and the construction industry is no exception. Those in the construction industry can protect against a potential cyberattack by understanding the risks and...more

New York and Illinois Regulators Recommend Third Party Cybersecurity Review For Specific Vulnerabilities

Alston & Bird on 5/24/2021

This month, the Illinois Department of Insurance issued guidance to insurers recommending assessments in response to a Microsoft Exchange vulnerability, detailed in the guidance. In the Bulletin dated May 5, the Department...more

Elements of Right-Sized Privacy Program: Appropriately Addresses Third Parties

Sheppard Mullin Richter & Hampton LLP on 1/29/2021

To round out this series on right-sizing a privacy program, our last stop is thinking about the impact of working with third parties. There are many legal requirements to assess and/or to address in third party contracts when...more

Mortgage Analytics Company and FTC Agree to Settlement on Allegations Related to Third-Party Vendor Data Breach

Balch & Bingham LLP on 1/8/2021

Ascension Data & Analytics LLC, a data analytics company for the mortgage industry, has entered into a proposed settlement agreement with the Federal Trade Commission (FTC) following allegations that it violated the...more

[Virtual Event] U.S. Export & Reexport Compliance For Canadian Operations - January 26th - 27th, 9:00 am - 5:00 pm EST

American Conference Institute (ACI) on 11/30/2020

For a whole decade, ACI’s U.S. Export & Reexport Compliance for Canadian Operations conference continues to stand apart as the only practical, comprehensive event of its kind for the export compliance community in Canada. ...more

Education Data Privacy and Security Laws: Best Practices for School Districts

Harris Beach PLLC on 10/8/2020

As if this fall weren’t hectic enough, school districts now need to prioritize compliance with a critical new regulation expanding New York state’s Education Law 2D. In effect since October 1, regulation Part 121 places new...more

A Glossary Guide to the CCPA

Mitratech Holdings, Inc on 11/15/2019

To get prepared for the California Consumer Privacy Act (CCPA), get a grasp of the basic jargonese and terms involved. The CCPA will impact hundreds of thousands of businesses worldwide. In “A Glossary Guide to the CCPA”,...more

China Issues New Cybersecurity Law to Protect Children

Latham & Watkins LLP on 9/9/2019

China’s PCPPIC protects children’s personal information in much the same way as COPPA and the GDPR, but with a few differences. On August 22, 2019, the Cyberspace Administration of China (CAC) released a new data privacy...more

Millions of Patient Records Exposed in Breach at Medical Testing Giants’ Third-Party Vendor

Patterson Belknap Webb & Tyler LLP on 6/12/2019

It’s been a tough week for the healthcare industry. Just days after Quest Diagnostics reported a breach at a third-party vendor affecting approximately 11.9 million of its patients, LabCorp disclosed that a breach at the...more

Should Companies Terminate Third Party Vendors That Cause A Data Breach?

Jackson Lewis P.C. on 3/5/2019

According to reports, bank customers in Australia (yes, data breach notification requirements exist down under) have been affected by “an industry-wide” data breach experienced by a third-party service provider to the banks –...more

California Consumer Privacy Act: The Challenge Ahead — Key Terms in the CCPA

Hogan Lovells on 9/14/2018

Words matter. Nowhere is this truer than in legislation, where word choices—often the product of long debate and imperfect compromise—determine the scope and impact of a law. ...more

SEC Cybersecurity Risk Alert Emphasizes Proactive Compliance and Ongoing Vigilance

BakerHostetler on 8/17/2017

On August 7, 2017, the Securities and Exchange Commission (SEC) released its latest cybersecurity risk alert, detailing findings from the examination of 75 broker-dealers, investment advisers and investment companies carried...more

OIG Reports Insufficient Oversight Of HIPAA Compliance

King & Spalding on 10/12/2015

The HHS Office for Civil Rights (OCR) must improve its oversight and enforcement of patient information privacy and security rules by “covered entities” and their business associates under the Health Information Portability...more

California Amends Definition of Personal Identifiable Information and Breach Notification Content Requirements

Foley & Lardner LLP on 10/12/2015

On October 6, 2015, California Governor Jerry Brown signed into law several changes to California’s Data Breach Notification Statute. The law, as amended, adds additional categories of information into the definition of...more

SEC Charges Investment Adviser With Failure to Adopt Proper Cybersecurity Policies and Procedures

Broker-Dealer Compliance + Regulation on 9/25/2015

A registered investment adviser agreed to settle SEC charges that it failed to adopt adequate cybersecurity policies and procedures reasonably designed to protect customer records and information as required by Rule 30(a) of...more

SEC Announces Cybersecurity Enforcement Action

Proskauer on Privacy on 9/25/2015

On September 22, 2015, the Securities and Exchange Commission (SEC) announced the settlement of an enforcement action against a St. Louis-based registered investment adviser (Adviser) brought under Rule 30(a) of Regulation...more

SEC Provides Additional Information On Cybersecurity Examinations

Alston & Bird on 9/21/2015

On September 15, 2015, the Security and Exchange Commission’s Office of Compliance Inspections and Examinations (“OCIE”) issued a Risk Alert to provide additional information on the areas of focus for its second round of...more

OCIE’s 2015 Cybersecurity Examination Initiative

Foley Hoag LLP on 9/21/2015

Second Round of Cybersecurity Examinations to Begin - On September 15, 2015, the Office of Compliance Inspections and Examinations (OCIE) of the Securities and Exchange Commission (SEC) issued a Risk Alert announcing a...more

Recent Enforcement Shows the Importance of Encrypting Mobile Devices Containing Protected Health Information

Foley & Lardner LLP on 9/18/2015

With headlines every day announcing another release of Protected Health Information (PHI), providers are asking themselves – is there a way to protect against these breaches? Beyond improving the security of large...more

29 Results

View per page

Page: of 2

Cybersecurity › Data Privacy › Third-Party

"My best business intelligence, in one easy email…"