News & Analysis as of September 18, 2024

Cybersecurity › Enforcement Actions › Data Protection

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

First PDPA Enforcement in Thailand: A Landmark Case

DLA Piper on 8/27/2024

On August 21, 2024, the second expert committee appointed under the Thai Personal Data Protection Act (PDPA) of 2019, issued an administrative fine to a major private company involved in online sales. The company allowed a...more

The Digital Download – Alston & Bird’s Privacy & Data Security Newsletter – August 2024

Alston & Bird on 8/21/2024

Selected U.S. Privacy and Cyber Updates - New York AG Seeks Comments on Rulemaking for Minors’ Online Protection Laws - On August 1, 2024, New York Attorney General Letitia James issued two advanced notices of proposed...more

Historic $1.4 Billion Data Privacy Settlement between Meta and Texas

Ballard Spahr LLP on 8/1/2024

The State of Texas and Meta Platforms Inc. (“Meta”) have agreed to a $1.4 billion settlement, to be paid out over five years, to resolve claims relating to Meta’s alleged use of facial recognition technology without user...more

SEC Settlement: Cybersecurity Internal Controls

Patterson Belknap Webb & Tyler LLP on 7/23/2024

On June 18, 2024, the Securities and Exchange Commission (“SEC”) announced a $2.1 million civil penalty settlement of charges against R.R. Donnelley & Sons (“RRD”), a global provider of business communications services and...more

SEC Issues Additional Guidance Regarding Cybersecurity Incident Disclosure

Troutman Pepper on 7/17/2024

On June 24, the staff of the U.S. Securities and Exchange Commission's (SEC) Division of Corporation Finance (Division of Corporation Finance) released five new Compliance & Disclosure Interpretations (C&DIs) relating to the...more

Will the U.S. Have a GDPR? With Rachael Ormiston of Osano

Osano on 7/9/2024

In this episode of The Privacy Insider Podcast, host Arlo Gilbert is joined by Rachael Ormiston, Head of Privacy at Osano, to dive into the complex world of U.S. privacy regulations. How does the U.S. view privacy differently...more

SEC Cyber Enforcement Update: Which Way Are the SolarWinds Blowing?

Holland & Knight LLP on 7/8/2024

The SEC has been aggressively pursuing cybersecurity investigations and enforcement actions against public companies and foreign private issuers. In these actions, the SEC often alleges one of two theories: 1) that the...more

DOJ Announces $11.3 Million in Settlements for FCA Violations

Alston & Bird on 6/27/2024

On Monday, June 17, 2024, the Department of Justice (DOJ) announced a settlement in which two U.S. based consulting companies agreed to pay a combined total of $11.3 million to resolve allegations that they violated the False...more

Dechert Cyber Bits - Issue 56

Dechert LLP on 6/14/2024

SEC Fines the New York Stock Exchange’s Parent Company $10 million for Failure to Promptly Notify Its Subsidiaries of Cybersecurity Breach - On May 22, 2024, the Securities and Exchange Commission (“SEC”) imposed a $10...more

SEC Revamps and Enhances Data Protections with Amendments to Regulation S-P

Foley Hoag LLP - Security, Privacy and the... on 5/30/2024

The Securities and Exchange Commission (“SEC”) has announced the adoption of amendments to Regulation S-P (“Amendments”) to modernize and enhance the rules that govern the treatment of consumers’ nonpublic personal...more

Intercontinental Exchange Settles with SEC Over Alleged Delay in Notification of Hack

Robinson+Cole Data Privacy + Security Insider on 5/28/2024

Intercontinental Exchange, Inc. (ICE), the owner of the New York Stock Exchange, has agreed to settle with the Securities and Exchange Commission (SEC) for $10 million over allegations that it failed to timely notify the SEC...more

FTC Cybersecurity and Data Privacy Roundup

BCLP on 5/15/2024

Last year was a pivotal one for data privacy, as privacy received substantial attention from many regulators, including the Federal Trade Commission (“FTC”). Looking back at the FTC’s 2023 enforcement actions, statements and...more

Data Privacy + Cybersecurity Insider - May 2024 #3

Robinson & Cole LLP on 5/13/2024

CYBERSECURITY - Health Care Entities Continue to Get Pummeled by Cybersecurity Attacks - The newest health care entity to be hit by a cyberattack is Ascension Health, which operates 140 hospitals and 40 assisted living...more

Healthcare Highlights from FTC’s 2024 PrivacyCon

Sheppard Mullin Richter & Hampton LLP on 4/8/2024

Last month, the Federal Trade Commission (“FTC”) hosted its annual PrivacyCon event, featuring an array of experts discussing the latest in privacy and data security research. This post, covering healthcare privacy issues, is...more

Understanding SEC’s Focus Amid Lack of Final AI Rules

Skadden, Arps, Slate, Meagher & Flom LLP on 2/27/2024

Last year, the U.S. Securities and Exchange Commission (SEC) proposed ambitious rules relating to artificial intelligence (AI) that have drawn significant commentary and criticism. While it is unlikely that any changes in the...more

Bad Medicine: 5 Lessons from the Connecticut AG’s Report on CTDPA Cure Notices

Wyrick Robbins Yates & Ponton LLP on 2/15/2024

On February 1, 2024, the Connecticut Office of the Attorney General (“OAG”) issued a Report to the General Assembly’s General Law Committee (“Report”), summarizing the OAG’s enforcement efforts during six months since the...more

Solar Winds Under GDPR: Corporate Responsibility and Risks in Data Protection

Thomas Fox - Compliance Evangelist on 2/13/2024

The General Data Protection Regulation (GDPR) has brought about significant changes in the way organizations handle data protection and privacy. It emphasizes the importance of transparency and honesty in disclosing data...more

Governmental Practice Cybersecurity and Data Protection: 2023 Recap & 2024 Forecast Alert

Sheppard Mullin Richter & Hampton LLP on 2/9/2024

To kick off the New Year, Sheppard Mullin’s Governmental Practice Cybersecurity & Data Protection Team has prepared a cybersecurity-focused 2023 Recap (including links to all of the resources the team has put out over the...more

The Federal Communications Commission Updates Its Data Breach Rules

Foley Hoag LLP - Security, Privacy and the... on 12/27/2023

On December 21, 2023, the Federal Communications Commission released an order updating its data breach rules. These updated rules require telecommunications providers to report breaches of customer proprietary network...more

Multistate Coalition of State Attorneys General Secures $49.5 Million from Cloud Company Blackbaud for 2020 Data Breach

Patterson Belknap Webb & Tyler LLP on 12/8/2023

State regulators across the country continue to increase their focus on cyber security and data privacy compliance and enforcement. For years, cloud company Blackbaud, a service provider to thousands of nonprofit enterprises,...more

SEC Brings Groundbreaking Claims Against Company For Fraud Relating To Data Breach

A&O Shearman on 11/8/2023

On October 30, 2023, the Securities and Exchange Commission filed claims against a software company (the “Company”) and its Chief Information Security Officer for alleged fraud and internal control failures relating to known...more

Updata: Your quarterly privacy & cybersecurity update - July - September 2023

Eversheds Sutherland (US) LLP on 11/7/2023

Welcome to the latest edition of Updata – the international update from Eversheds Sutherland’s dedicated Privacy and Cybersecurity team. Updata provides you with a compilation of privacy and cybersecurity regulatory and...more

SEC, Solar Winds and Compliance

Thomas Fox - Compliance Evangelist on 11/7/2023

The recent SEC lawsuit against SolarWinds Corp and its CISO, Tim Brown, following the 2020 data breach, has brought the issue of executive liability in cybersecurity disclosures to the forefront. This case sheds light on the...more

What Does the SEC’s Complaint Against SolarWinds Mean for CISOs and Boards?

Skadden, Arps, Slate, Meagher & Flom LLP on 11/7/2023

On October 30, 2023, the SEC filed a litigated complaint against SolarWinds, a software development company, and Timothy Brown, its chief information security officer (CISO). The SEC alleges that from October 2018, when...more

SEC Hits SolarWinds and CISO with Investor Fraud Suit Over Cybersecurity

Robinson+Cole Data Privacy + Security Insider on 11/6/2023

In a first, bold move by the Securities and Exchange Commission (SEC) following its new Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure by Public Companies, issued on July 26, 2023, this...more

283 Results

/

View per page

Page: of 12

Next »