US Regulatory Archives

The Impact of Data Security Incident Trends on Commercial Transactions

September 17, 2021
Editorial Team
Breach Notification, Breach prevention, Breach response, Compliance, Consumer Privacy, Cybersecurity, Data Protection, Data Security, Privacy, Ransomware, US Regulatory

The 2021 edition of BakerHostetler’s annual Data Security Incident Response Report – a report based on the firm’s experience with data security incident response and litigation over the past year – features a number of important insights previously covered on this blog including trends in global breach notification, healthcare industry risks and ransomware. The Report…

Become a member to access this content.

How Federal Agencies are Approaching Cybersecurity Training Programs

September 12, 2021
Amy Willcox
Artificial Intelligence, Cybersecurity, DHS, Federal Agencies, Training and Education, US Regulatory

Due in part to priorities being set by the Biden administration, many government organizations are taking steps to emphasize the importance of cybersecurity. A big part of that means implementing training programs as ways to better handle cybersecurity threats, and a handful of proposed legislations aims to do just that. With cybersecurity becoming a national…

Become a member to access this content.

How to Comply With the EU’s New SCC Framework

July 23, 2021
Amy Willcox
Consumer Privacy, Data Privacy, Data Protection, GDPR, Privacy, Privacy Shield, US Regulatory

Since the Schrems 2.0 decision, any organization involved in the international transfer of personal data between the EU and America has been eagerly awaiting a new set of Standard Contractual Clauses (SCCs). In short, the SCCs previously used for such transfers were written before the implementation of the EU’s General Data Protection Regulation (GDPR), so…

Become a member to access this content.

U.S. Government Releases Tools for Fighting Ransomware

July 20, 2021
Tim Crino
Cybersecurity, Governance, Legislation, Ransomware, Resources, US Regulatory

The U.S. Department of Homeland Security, in conjunction with the U.S. Department of Justice, launched a new one-stop hub for ransomware guidance on July 15. The hub is designed to help the public and private sectors deal with the rising threat of ransomware, writes JD Supra. The hub includes resources for private and public organizations,…

Become a member to access this content.

Breaking Down CISA’s “Bad Practices” Guidance

Many cyberattacks are a product of easily preventable mistakes. The Cybersecurity and Infrastructure Security Agency (CISA) has sought to remedy this paradigm with a long-running list of best practices that’s offered organizations frameworks for important cybersecurity functions such as training, risk management, and incident response. Now, to raise awareness and put an end to certain…

Become a member to access this content.

Why Fintech Companies Want to be Regulated by the CFPB

April 21, 2021
Amy Willcox
Banks, Compliance, Financial Services, FinTech, US Regulatory

It’s unusual to see an industry making a formal request to be regulated, but that’s exactly what fintech data aggregators are asking of the Consumer Financial Protection Bureau (CFPB). Companies like Plaid and Robinhood have reasoned that more oversight by the CFPB comes with access to more consumer data–which in turn would allow fintech companies…

Become a member to access this content.

At Last: US Proposes Federal Data Privacy Law

March 24, 2021
Amy Willcox
US Data Privacy Legislation, US Regulatory

At long last, a comprehensive federal data privacy bill has been introduced in the US legislature by Representative Suzan DelBene (D-Washington). Known at the Information Transparency and Personal Data Control Act (ITPDCA) ensures the protection of “our most sensitive personal information including financial, health, genetic, biometric, geolocation, sexual orientation, citizenship and immigration status, social security…

Become a member to access this content.

How to Use New CSBS Cybersecurity Examination Tool

March 5, 2021
Amy Willcox
Cybersecurity, Data Privacy, Data Protection, Uncategorized, US Regulatory

Any nonbank institution looking to protect against, mitigate and respond to cybersecurity threats should take advantage of the Conference of State Bank Supervisors’ (CSBS) new cybersecurity examination tool. Unveiled during the Nationwide Multistate Licensing System Annual Conference in February, the resource is designed for state regulators to use during examinations, and for organizations to self-evaluate…

Become a member to access this content.

Minnesota Proposes its Own Version of CCPA

February 19, 2021
Amy Willcox
CCPA, Data Privacy, Data Protection, GDPR, Privacy, State Laws, US Regulatory

Ever since the California Consumer Privacy Act (CCPA) set the tone for state-level privacy laws, more and more states have followed suit. At the start of the year, Minnesota proposed its own data privacy bill–and yes, it’s heavily influenced by CCPA. The bill, known as HF-36,has been sent for referral to the Committee on Commerce,…

Become a member to access this content.

2020 News in Review

Week Ending December 28 ICO Warns SolarWinds Victims to Report Breaches The United Kingdom’s Information Commissioner’s Office (ICO) has issued a warning to organizations compromised by the SolarWinds breach. The breach, which was carried out by Russian hackers, affected more than 18000 organizations worldwide. ICO requires UK data controllers subject to NIS regulations to report…

Become a member to access this content.