Debevoise Data Blog

JANUARY 30, 2025

In this blog post, we discuss key provisions in the Consent Order, which not only underscore the FTCs expectations for (and enforcement of) reasonable security practices in the absence of specific regulations but also highlight the added compliance burden that companies may face in an enforcement action. For instance, the U.S.

Due diligence 52

Due diligence Compliance Software Attorney 52

Debevoise Data Blog

NOVEMBER 18, 2024

For some firms, compliance with the Circular will require a significant increase in their cybersecurity compliance budgets and the securing of additional resources for 2025 and beyond. Some companies may want to address this now as 2025 budgets are being finalized.

Intellectual Property 52

Intellectual Property Due diligence Compliance Machine learning 52

Inside Privacy

DECEMBER 1, 2023

In terms of timing, the CRA will come into force over a phased transition period starting in late 2025. Conducting due diligence on imported PDEs. As with most recent European technology regulation, the CRA will come with the threat of high penalties for non-compliance – up to €15 million or 2.5% of global turnover.

Due diligence 65

Due diligence Software Compliance Law 65

Debevoise Data Blog

DECEMBER 10, 2024

In this post, we discuss how companies can comply with NYDFSs current approach by establishing internal governance committees, conducting a gap assessment against existing controls and standardizing due diligence processes, among other practical tips.

Compliance 52

Compliance Due diligence Law Law 52

Inside Privacy

DECEMBER 5, 2023

As with most recent European technology regulation, the Cyber Resilience Act will come with the threat of high penalties for non-compliance – up to €15 million or 2.5% of global turnover. What’s happening next?

Due diligence 65

Due diligence Compliance Law Law 65

Debevoise Data Blog

OCTOBER 31, 2023

This could impact financial firms who are considering using the EU AI Act as their ‘high watermark’ for AI regulatory and governance compliance, who will have to accommodate any UK-specific requirements in their compliance programmes. The UK Financial Authorities could look to such existing resources when developing future guidance.

Compliance 52

Compliance Due diligence Machine learning Data protection 52

Debevoise Data Blog

NOVEMBER 21, 2022

Our key takeaways are: For financial services firms – determine if you are covered as a “financial entity” and, if so, begin charting a path to compliance: it is likely to be a resource-intensive undertaking and one which demands ongoing engagement from across the business, including management. What are the penalties for non-compliance?

Compliance 40

Compliance Due diligence Analytics Software 40

Ikigai Law

JUNE 1, 2023

Main Course Finding a way around the circuitous KYC maze The challenge of KYC compliance haunts every financial institution. And prescribes enhanced ongoing due-diligence measures for them. Mints: a refresher about recent fintech developments. Takeaway: articles and podcasts to grab and go.

e-records 52

e-records Compliance Due diligence Law 52

Debevoise Data Blog

JANUARY 16, 2025

Third-Party Contractual and Compliance Obligations The rule prohibits data brokerage with any foreign person who is not a covered person unless the U.S. If approved, the license authorizes only the specific transaction described in the application and mandates compliance with all stipulated conditions, such as filing required reports.

Compliance 52

Compliance Due diligence e-records Time-tracking 52