On January 16, 2025, President Biden issued Executive Order 14144 on Strengthening and Promoting Innovation in the Nation’s Cybersecurity (the “EO”). Building on prior initiatives such as Executive Order 14028 and the...more
1/24/2025
/ Artificial Intelligence ,
Compliance ,
Cybersecurity ,
Data Privacy ,
Encryption ,
Executive Orders ,
Federal Contractors ,
Homeland Security Cybersecurity & Infrastructure Security Agency (CISA) ,
National Security ,
NIST ,
Software ,
State Sponsors of Cyberattacks
The rule imposes substantial new diligence, reporting, cybersecurity, and auditing obligations on companies.
On December 27, 2024, the U.S. Department of Justice (“DOJ”) issued a final rule implementing Executive Order...more
1/8/2025
/ Advanced Notice of Proposed Rulemaking (ANPRM) ,
Advisory Opinions ,
Biden Administration ,
Compliance ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
Department of Justice (DOJ) ,
Executive Orders ,
Final Rules ,
Foreign Entities ,
Homeland Security Cybersecurity & Infrastructure Security Agency (CISA) ,
National Security ,
Notice of Proposed Rulemaking (NOPR) ,
Reporting Requirements ,
Risk Management ,
Sensitive Personal Information
On May 9, 2024, Maryland Governor Wes Moore signed the Maryland Online Data Privacy Act of 2024 (“MODPA”) into law. This makes Maryland the fifth state this year and eighteenth state in total to adopt comprehensive data...more
On February 28, 2024, President Biden signed Executive Order (EO) 14117 titled “Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern.” On March 5,...more
4/1/2024
/ Advanced Notice of Proposed Rulemaking (ANPRM) ,
Artificial Intelligence ,
Biden Administration ,
Biometric Information ,
Cyber Espionage ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
Data Security ,
Department of Justice (DOJ) ,
Executive Orders ,
Geolocation ,
Health Insurance Portability and Accountability Act (HIPAA) ,
National Security ,
PHI ,
Popular ,
Risk Assessment ,
Sensitive Personal Information ,
Social Security Act
It’s been, as the song goes, a long, long time coming. In April, the Department of Labor issued its first ever formal cybersecurity guidance for retirement plan sponsors and retirement plan fiduciaries, and for the service...more
6/23/2021
/ Benefit Plan Sponsors ,
Cybersecurity ,
Data Privacy ,
Department of Labor (DOL) ,
Employee Retirement Income Security Act (ERISA) ,
General Data Protection Regulation (GDPR) ,
New Guidance ,
Personal Information ,
Popular ,
Retirement Plan ,
Risk Management ,
Third-Party Service Provider