News & Analysis as of

Risk Management Financial Institutions Data Privacy

Skadden, Arps, Slate, Meagher & Flom LLP

Fintech Focus Podcast | Responding to a Cyber Attack – Key Considerations for GCs and CISOs

As companies shift their thinking from “if” a cyberattack will happen to “when” an attack hits, the key differentiator in how a company emerges from an attack is often dictated by preparation and strategic planning in order...more

K2 Integrity

[Webinar] Collaborating for Digital Transformation: Innovation, Governance, and the Future of Financial Operations - April 9th,...

K2 Integrity on

Join our panel of experts for an insightful one-hour session on digital transformation in financial crime compliance. This webinar brings together leaders and innovators at the forefront of financial crime compliance...more

Quarles & Brady LLP

Warning! ChatGPT Exploit Used by Threat Actors in Cyber Attacks

Quarles & Brady LLP on

Members of the health care and financial industries, along with other industries that hold sensitive data, are warned that a ChatGPT vulnerability is being actively exploited by threat actors to attack security flaws in AI...more

Husch Blackwell LLP

Deadline Ahead: NYDFS Compliance Notifications are due by April 15

Husch Blackwell LLP on

Businesses that are subject to the NYDFS Cybersecurity Regulations have four weeks left to submit their annual notices of compliance or acknowledge their noncompliance. When the regulations were amended in 2023, several of...more

Orrick, Herrington & Sutcliffe LLP

Senators pen letter to bank data CEO on debanking claims

On March 6, Sens. Andy Kim (D-NJ) and Elizabeth Warren (D-MA) from the Senate Banking, Housing, and Urban Affairs Committee requested information from the CEO of a company that collects and reports consumer information in the...more

BCLP

State Laws Present Litigation Risks for Financial Industry’s Artificial Intelligence Use

BCLP on

The financial industry increasingly uses artificial intelligence (“AI”) to raise business efficiencies, improve customer experience, and limit fraud and crime. However, two lawsuits leveraging existing state privacy laws and...more

McGlinchey Stafford

The Next Wave of Open Banking: New Rules on Personal Financial Data Rights

McGlinchey Stafford on

A rapid transformation in consumer finance is being brought about by open banking—a pivotal innovation that allows consumers to give third parties real-time access to their detailed financial data. Open banking has the...more

A&O Shearman

ESAs publish guidelines on exchange of information relevant to fit and proper assessments in the official EU languages

A&O Shearman on

The European Supervisory Authorities (ESAs) have published joint guidelines on the system established by the for the exchange of information relevant to the assessment of the fitness and propriety in the official EU...more

Kramer Levin Naftalis & Frankel LLP

NYDFS Updates Regulated Firms on Upcoming Cyber Requirements

Financial firms doing business in New York should be mindful of a recent e-blast sent by the state’s financial regulator concerning cybersecurity requirements that become effective in less than two months. The New York...more

Skadden, Arps, Slate, Meagher & Flom LLP

Europol Published Practical Guide for Cooperation Between Financial Institutions and Investigative Authorities

Public-private partnerships across the world between financial institutions, financial intelligence units and investigative authorities have laid the foundation to advance criminal investigations. However, there is further...more

Orrick, Herrington & Sutcliffe LLP

CFPB’s union raises concerns over security and alleged misuse of sensitive information

On February 7, the union representing CFPB employees published a notice expressing concerns regarding the recent addition of certain DOGE employees to the CFPB’s email directory and their presence in offices. ...more

Orrick, Herrington & Sutcliffe LLP

California DFPI mandates cybersecurity overhaul in credit union consent order

On February 4, the California DFPI announced a consent order issued against a credit union (respondent) following a significant cybersecurity breach. This breach, a ransomware attack, allegedly led to the shutdown of various...more

K&L Gates LLP

Financial Abuse and the Need for Better Financial Services Regulation

K&L Gates LLP on

In December 2024 the Parliamentary Joint Committee on Corporations and Financial Services (the Committee) published a Report following an inquiry into how well the existing financial services regulatory framework is...more

BCLP

Cybersecurity Risks for Financial Services Firms: Proactive Strategies to Stay Ahead

BCLP on

The 2024 CrowdStrike outage and the ransomware attack on NHS partner Synnovis hit mainstream news and highlighted the fragility of ICT supply chains and the risks posed by cyber incidents....more

Morgan Lewis - Tech & Sourcing

DORA European Commission Clarifies Scope of ICT Services

European regulators recently published clarifications on the scope of ICT services under the EU Digital Operational Resilience Act (DORA), prepared by the European Commission, which confirms previous guidance and enables...more

Ward and Smith, P.A.

Data Privacy Insights Part 1: North Carolina Ranks High in Cybercrime Complaints

Ward and Smith, P.A. on

The FBI's Internet Crime Complaint Center (IC3) report sheds light on the growing threat of cybercrime, both nationally and within North Carolina. The state ranks among the top 15 in the U.S. for cybercrime complaints,...more

K&L Gates LLP

Managing Artificial Intelligence: The Monetary Authority of Singapore's Recommendations on AI Model Risk Management

K&L Gates LLP on

Introduction and Background - On 5 December 2024, as part of the Monetary Authority of Singapore’s (MAS) incremental efforts to ensure responsible use of artificial intelligence (AI) in Singapore’s financial sector, MAS...more

McDermott Will & Emery

Data Privacy and Cybersecurity in 2025: PCI DSS 4.0

McDermott Will & Emery on

Following our recent client alert, learn more about PCI DSS 4.0 coming into effect and its impact on organizations in 2025. Mark Schreiber, Brian Long, and Sam Genovese share further insights from working with clients on...more

Mayer Brown

Applying the Enterprise Risk Mindset to AI

Mayer Brown on

Artificial intelligence (AI) and other emerging technologies have the potential to revolutionize the financial industry. At the same time, its use introduces new risks that need to be anticipated and addressed. This paper...more

Morrison & Foerster LLP

SEC Caps 2024 with Another Cyber Enforcement Action

The SEC continues to leave its mark as a federal cybersecurity enforcer and closed out the year by charging another company with making misleading statements about a cybersecurity attack and failing to maintain cyber-related...more

WilmerHale

Why Depository Institutions, with or Without Affiliated Securities Firms, can and should Manage Employee Use of Personal Devices...

WilmerHale on

The purpose of this paper is to show how the failure to monitor for and prevent off-channel communications poses risk to traditional depository institutions that are not subject to the jurisdiction of securities-law...more

Troutman Pepper Locke

CFPB Highlights Fair Lending Risks in Advanced Credit Scoring Models

Troutman Pepper Locke on

Last week, the Consumer Financial Protection Bureau (CFPB or Bureau) released its latest Supervisory Highlights report, focusing on the use of advanced technologies in credit scoring models. ...more

Katten Muchin Rosenman LLP

DORA Takes Effect: Key Next Steps for Firms

After a two-year implementation period, the EU Digital Operational Resilience Act (DORA) takes effect on 17 January 2025. DORA is part of the EU’s Digital Finance Package and aims to strengthen the financial sector’s...more

Wilson Sonsini Goodrich & Rosati

DORA: New EU Cybersecurity Requirements for the Financial Sector Enter into Force

Starting January 17, 2025, the Digital Operational Resilience Act (DORA) will require financial entities and their critical information and communication technology (ICT) service providers to comply with enhanced...more

Jones Day

Understanding DORA: Digital Operational Resilience Act Now in Effect for Financial Entities and ICT Service Providers

Jones Day on

DORA, the first EU regulation designed to establish a unified and robust digital resilience standard for the financial sector, becomes directly applicable on January 17, 2025, introducing significant penalties and...more

49 Results
 / 
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide