News & Analysis as of

Risk Management Financial Institutions Data Privacy

Orrick, Herrington & Sutcliffe LLP

CFPB’s union raises concerns over security and alleged misuse of sensitive information

On February 7, the union representing CFPB employees published a notice expressing concerns regarding the recent addition of certain DOGE employees to the CFPB’s email directory and their presence in offices. ...more

Orrick, Herrington & Sutcliffe LLP

California DFPI mandates cybersecurity overhaul in credit union consent order

On February 4, the California DFPI announced a consent order issued against a credit union (respondent) following a significant cybersecurity breach. This breach, a ransomware attack, allegedly led to the shutdown of various...more

K&L Gates LLP

Financial Abuse and the Need for Better Financial Services Regulation

K&L Gates LLP on

In December 2024 the Parliamentary Joint Committee on Corporations and Financial Services (the Committee) published a Report following an inquiry into how well the existing financial services regulatory framework is...more

BCLP

Cybersecurity Risks for Financial Services Firms: Proactive Strategies to Stay Ahead

BCLP on

The 2024 CrowdStrike outage and the ransomware attack on NHS partner Synnovis hit mainstream news and highlighted the fragility of ICT supply chains and the risks posed by cyber incidents....more

Morgan Lewis - Tech & Sourcing

DORA European Commission Clarifies Scope of ICT Services

European regulators recently published clarifications on the scope of ICT services under the EU Digital Operational Resilience Act (DORA), prepared by the European Commission, which confirms previous guidance and enables...more

Ward and Smith, P.A.

Data Privacy Insights Part 1: North Carolina Ranks High in Cybercrime Complaints

Ward and Smith, P.A. on

The FBI's Internet Crime Complaint Center (IC3) report sheds light on the growing threat of cybercrime, both nationally and within North Carolina. The state ranks among the top 15 in the U.S. for cybercrime complaints,...more

K&L Gates LLP

Managing Artificial Intelligence: The Monetary Authority of Singapore's Recommendations on AI Model Risk Management

K&L Gates LLP on

Introduction and Background - On 5 December 2024, as part of the Monetary Authority of Singapore’s (MAS) incremental efforts to ensure responsible use of artificial intelligence (AI) in Singapore’s financial sector, MAS...more

McDermott Will & Emery

Data Privacy and Cybersecurity in 2025: PCI DSS 4.0

McDermott Will & Emery on

Following our recent client alert, learn more about PCI DSS 4.0 coming into effect and its impact on organizations in 2025. Mark Schreiber, Brian Long, and Sam Genovese share further insights from working with clients on...more

Mayer Brown

Applying the Enterprise Risk Mindset to AI

Mayer Brown on

Artificial intelligence (AI) and other emerging technologies have the potential to revolutionize the financial industry. At the same time, its use introduces new risks that need to be anticipated and addressed. This paper...more

Morrison & Foerster LLP

SEC Caps 2024 with Another Cyber Enforcement Action

The SEC continues to leave its mark as a federal cybersecurity enforcer and closed out the year by charging another company with making misleading statements about a cybersecurity attack and failing to maintain cyber-related...more

WilmerHale

Why Depository Institutions, with or Without Affiliated Securities Firms, can and should Manage Employee Use of Personal Devices...

WilmerHale on

The purpose of this paper is to show how the failure to monitor for and prevent off-channel communications poses risk to traditional depository institutions that are not subject to the jurisdiction of securities-law...more

Troutman Pepper Locke

CFPB Highlights Fair Lending Risks in Advanced Credit Scoring Models

Troutman Pepper Locke on

Last week, the Consumer Financial Protection Bureau (CFPB or Bureau) released its latest Supervisory Highlights report, focusing on the use of advanced technologies in credit scoring models. ...more

Katten Muchin Rosenman LLP

DORA Takes Effect: Key Next Steps for Firms

After a two-year implementation period, the EU Digital Operational Resilience Act (DORA) takes effect on 17 January 2025. DORA is part of the EU’s Digital Finance Package and aims to strengthen the financial sector’s...more

Wilson Sonsini Goodrich & Rosati

DORA: New EU Cybersecurity Requirements for the Financial Sector Enter into Force

Starting January 17, 2025, the Digital Operational Resilience Act (DORA) will require financial entities and their critical information and communication technology (ICT) service providers to comply with enhanced...more

Jones Day

Understanding DORA: Digital Operational Resilience Act Now in Effect for Financial Entities and ICT Service Providers

Jones Day on

DORA, the first EU regulation designed to establish a unified and robust digital resilience standard for the financial sector, becomes directly applicable on January 17, 2025, introducing significant penalties and...more

A&O Shearman

Data protection guidance for firms sharing customer information for the prevention of fraud

A&O Shearman on

The UK Information Commissioner’s Office (the ICO) has published guidance to help firms take steps to protect customers’ personal information when data is shared between firms to prevent fraud and scams....more

A&O Shearman

Business email compromise and invoice fraud – a duty of care on the innocent?

A&O Shearman on

The Western Australian District Court’s recent decision in Mobius Group Pty Ltd v Inoteq Pty Ltd1 highlights the potential consequence for the innocent party where fraudulent changes in bank details are sent from their...more

Proskauer - New Media & Technology

CFPB Issues Final “Open Banking” Rule Governing Third Party Use of Consumer Banking Information

After a yearslong lead-up, the Consumer Financial Protection Bureau (CFPB) published its final “open banking” rule in October. The rule effectuates the section of the Consumer Financial Protection Act, which charged the CFPB...more

Baker Donelson

New York DFS Releases AI Cybersecurity Guidance

Baker Donelson on

The New York Department of Financial Services (NYDFS) issued new guidance (the Guidance) on October 16, 2024, to help state-regulated financial institutions mitigate the myriads of cybersecurity risks posed by artificial...more

Mayer Brown

HKMA Enhanced Consumer Protection in the Use of GenAI by Authorized Institutions in Hong Kong

Mayer Brown on

The Hong Kong Monetary Authority (HKMA) has imposed additional principles on the use of big data analytics and artificial intelligence (BDAI) and specifically, generative artificial intelligence (GenAI) by authorized...more

Skadden, Arps, Slate, Meagher & Flom LLP

ECB Mandates Board Expertise in Addressing ICT and Security Risks

Earlier this year, a dedicated policy prepared by the European Central Bank (ECB) came into effect requiring bank management bodies to broaden their collective understanding of and proficiency in identifying and dealing with...more

Ballard Spahr LLP

Treasury Issues Request for Information on Use of AI in Financial Services

Ballard Spahr LLP on

The U.S. Department of the Treasury (“Treasury”) has released a Request for Information on the Uses, Opportunities, and Risks of Artificial Intelligence (“AI”) in the Financial Services Sector (“RFI”).  Written comments are...more

Baker Donelson

[Webinar] New Privacy and Cybersecurity Regulations: What Financial Institutions Need to Know to Stay Compliant - June 13th, 10:00...

Baker Donelson on

The financial services industry has seen a litany of new data privacy and cybersecurity challenges through the first half of 2024. Financial institutions are facing unprecedented compliance hurdles resulting from the...more

American Conference Institute (ACI)

[Event] 23rd Annual Canadian Forum on Anti-Money Laundering and Financial Crime - June 5th - 6th, Toronto, Ontario, Canada

Hosted by the Canadian Institute, the 23rd Annual Canadian Forum on Anti-Money Laundering and Financial Crime returns for another exciting year. The event features carefully curated programming providing practical guidance...more

Orrick, Herrington & Sutcliffe LLP

Fed’s annual report: cybersecurity risk management & emerging threats

On August 1, the Fed released its 2023 Cybersecurity and Financial System Resilience Report. Required annually by the Consolidated Appropriations Act, 2021, the report describes the measures the Fed has taken to strengthen...more

39 Results
 / 
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide