Legal News
September 10, 2023
1266 views 4 secs 0

New SEC Cybersecurity Disclosure Requirements Give Public Companies Only Four Days to Disclose Material Cybersecurity Incidents

This summer, the Securities and Exchange Commission (SEC) adopted rules to enhance and standardize disclosures by public companies regarding cybersecurity risk management, strategy, governance, and incidents.   The rules will impose a number of new requirements, including disclosures regarding: Read more of this article at Workplace Privacy, Data Management & Security Report.

Legal News
September 10, 2023
677 views 22 secs 0

California Privacy Protection Agency Releases Draft Rules on Cybersecurity Audits and Risk Assessments

Ahead of its September 8 board meeting, the California Privacy Protection Agency (CPPA) has issued draft regulations on cybersecurity audits and risk assessments.  Public comments will be requested once the formal rulemaking process is kicked off.  Accordingly, the draft regulations are subject to change.  Below are the key takeaways: Cybersecurity Audits Read more of this article at Inside […]

Legal News
September 10, 2023
1426 views 9 mins 0

Russian Businessman Sentenced to Nine Years in Prison in $93 Million Hack-to-Trade Conspiracy

BOSTON – A Russian businessman was sentenced today in federal court in Boston for his involvement in an elaborate hack-to-trade scheme that netted approximately $93 million through securities trades based on confidential corporate information stolen from U.S. computer networks. Vladislav Klyushin, a/k/a “Vladislav Kliushin,” 42, of Moscow, Russia, was sentenced by U.S. District Court Judge […]

Legal News
September 07, 2023
818 views 52 secs 0

Vendor Management from a U.S. Data Privacy Perspective

Given the increasing number of data privacy laws in the U.S., entering into appropriate data processing agreements (“DPAs”) with vendors has now become a critical component of vendor management. It can also be one of the most time-consuming and complex aspects of data privacy compliance. This article discusses when an organization should enter into a […]

Healthcare, Legal News
September 07, 2023
747 views 3 mins 0

FTC Finalizes Order with 1Health.io Over Charges it Failed to Protect Privacy and Security of DNA Data and Unfairly Changed its Privacy Policy

The Federal Trade Commission finalized an order with 1Health.io that settles charges that the genetic testing firm left sensitive genetic and health data unsecured, deceived consumers about their ability to get their data deleted, and changed its privacy policy retroactively without adequately notifying consumers and obtaining their consent. In a complaint first announced in June 2023, the […]

Legal News, Europe, Malware Ransomware
September 01, 2023
1360 views 43 secs 0

FBI, European partners seize Quakbot malware network in blow to global cybercrime

U.S. officials said Tuesday that the FBI and its European partners infiltrated and seized control of a major global malware network used for more than 15 years to commit a gamut of online crimes including crippling ransomware attacks. They then remotely removed the malicious software agent — known as Qakbot — from thousands of infected […]

Legal News
September 01, 2023
1220 views 0 secs 0

Texas Amends Data Breach Notification Law, Updates Effective September 1

Texas recently enacted an amendment to its data breach notification law. As of September 1, 2023, there are two changes to the requirements when notifying the Texas Attorney General. In Texas, breaches of 250 residents or more must be reported to the Attorney General. Now, as amended, this will need to be done so as soon as […]

Commentaries and Analyses, Legal News
September 01, 2023
1290 views 7 secs 0

Should senior IT professionals be liable for breaches?

In July, SolarWinds CISO Tim Brown and CFO Bart Kalsu received Securities and Exchange Commission notices of potential enforcement action over alleged violation of securities laws. The issue stems from their response to the Russian hack of the Orion network monitoring software in 2020 — a product used by more than 30,000 organisations. This isn’t the first […]

Consumer Alerts, Legal News
August 31, 2023
1371 views 3 secs 0

A California bill under consideration could make it easier for consumers to scrub our personal data from the web. Guess who’s fighting it.

The Los Angeles Times reports that legislation being considered in California would make it easier for consumers to get every data broker to delete their personal information with just one request. Tech companies and other big businesses are fighting the bill. The bill, known as the Delete Act, faces a critical vote this Friday as […]