article thumbnail

AI Compliance Might Seem Overwhelming, But Gartner Boils It Down to 4 Principles

Legal Tech Monitor

“While laws in many jurisdictions may not come into effect until 2025, legal leaders can get started while they wait for finalized regulation to take shape,” said Laura Cohn, a Gartner senior principal.

article thumbnail

Data Act Becomes Law: What Next?

Inside Privacy

As noted below, the Data Act will shortly be published in the Official Journal and become enforceable in 2025. The Data Act’s obligations are broad and may require significant engineering work to re-design products to ensure compliance. We provide below a brief overview of key takeaways and timelines.

Law 65
professionals

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

New York Department of Financial Services Finalizes Second Amendment to Cybersecurity Regulation

Inside Privacy

Compliance periods for the newly finalized requirements in the Second Amendment will be phased over the next two years, as set forth in additional detail below. NYDFS also provided further context on its expectations for compliance in responding to public comments even where it did not make changes. See Section 500.17 (a). a)(2), 500.7,

article thumbnail

Advantages of Private Cloud Technology for Law Firms’

CaseFox

Enhanced Security and Compliance Law firms are entrusted with sensitive client data, including financial, legal, and personal information. Additionally, private cloud solutions can be customized to meet specific compliance requirements, ensuring that firms are meeting legal and regulatory compliances.

article thumbnail

The EU’s Cyber Resilience Act Has Now Been Agreed

Inside Privacy

In terms of timing, the CRA will come into force over a phased transition period starting in late 2025. As with most recent European technology regulation, the CRA will come with the threat of high penalties for non-compliance – up to €15 million or 2.5% of global turnover.

article thumbnail

ENISA Releases Comprehensive Framework for Ensuring Cybersecurity in the Lifecycle of AI Systems

Technology Law Dispatch

ENISA highlights the effectiveness of cybersecurity certifications, such as ISO/IEC 15408 for ICT security assessment or ISO/IEC 18045 for Common Criteria evaluation, in ensuring compliance. Once published, there will be a period of 24 months before it becomes effective (estimated Q3/4 2025).

article thumbnail

EU Digital Operational Resilience Act (DORA): Management Obligations and the Role of the Board

Debevoise Data Blog

This signals the likely increased regulatory expectation that Boards more closely oversee digital operational resilience-related risks than may currently be the case, including by ensuring, at a minimum, compliance with DORA’s varied and detailed technical and policy obligations. What is the “Management Body” ?