Machine Learning (ML) and Artificial Intelligence (AI) has been influencing information security and governance for many years. These technologies are expected to become more integral and widespread–this industry report by Vantage Market Research estimates that by 2028, the global AI…
As data privacy laws proliferate, compliance becomes a bigger and more complicated priority for organizations across the globe. That burden is especially heavy for those that deal with particularly sensitive or coveted types of data, like financial information and healthcare…
Virginia Passes Amendments to VCDPA Governor Glenn Young of Virginia last week approved three amendments to the Virginia Consumer Data Protection Act (VCDPA). The first amendment, H 381, creates an exemption to consumers’ right to delete, and will allow data…
In today’s regulatory and economic environment, organizations need to keep pace with constantly-shifting cybersecurity and data privacy threats. ADCG has sifted through current best practices to provide the following (non-exhaustive) guidance for Chief Information Security Officers (CISOs), and other compliance…
On March 25, the European Commissioner for Justice Didier Reynders, and U.S. Secretary of Commerce Gina Raimondo issued a joint statement announcing a preliminary replacement for the Privacy Shield framework. The Trans-Atlantic Data Privacy Framework will allow data transfers between…
When the European Union (EU) enacted the General Data Protection Regulation (GDPR) on May 2, 2018, the world was introduced to the concept of data minimization. According to Article 5 of the GDPR, data minimization means “personal data shall be…
Over the last several years, California legislators have been leading the country in creating new privacy protections for consumers. These legislative actions, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) have been primarily focused…
China’s New Cybersecurity Review Process Takes Effect On February 15, 2022, the Cyberspace Administration of China (CAC) and 12 other Chinese government departments issued the New Measures for Cybersecurity Review (NMCR), as part of an ongoing effort to regulate tech…
On February 9, Gary Gensler, Chair of the U.S. Securities and Exchange Commission (SEC), issued a statement on “comprehensive reforms to improve cybersecurity risk management for registered investment advisers, registered investment companies, and business development companies” that the SEC is…
