Debevoise Data Blog

NOVEMBER 18, 2024

There is also some overlap with the requirements in the EU AI Act and the Colorado AI Law , although the Circular is narrower (applying only to language models) and more prescriptive. Some companies may want to address this now as 2025 budgets are being finalized. To subscribe to the Data Blog, please click here.

Intellectual Property 52

Intellectual Property Due diligence Compliance Machine learning 52

Inside Privacy

DECEMBER 1, 2023

In terms of timing, the CRA will come into force over a phased transition period starting in late 2025. Conducting due diligence on imported PDEs. Covington’s Privacy and Cybersecurity Practice regularly advises on cybersecurity laws in Europe and elsewhere.

Due diligence 65

Due diligence Software Compliance Law 65

Debevoise Data Blog

OCTOBER 20, 2024

The Guidance applies to entities that are covered by Part 500 ( i.e., entities with a license under the New York Banking Law, Insurance Law or Financial Services Law), but it provides valuable direction to all companies for managing the new cybersecurity risks associated with AI.

Intellectual Property 52

Intellectual Property Due diligence Machine learning Defendant 52

Debevoise Data Blog

NOVEMBER 21, 2024

For some firms, compliance with the Circular will require a significant increase in their compliance budgets and the securing of additional resources for 2025 and beyond. The authors would like to thank Debevoise Law Clerks Adam Shankman and Diane Bernabei for their contribution to this blog post.

Compliance 52

Compliance Due diligence Law Law 52

Inside Privacy

DECEMBER 5, 2023

Although voluntary, the draft standards will also have consequences for European cybersecurity laws more broadly, including: NIS 2, Europe’s cybersecurity directive for essential infrastructure, which provides that member states may require entities to use products that are certified under the ECCS. of global turnover.

Due diligence 65

Due diligence Compliance Law Law 65

Debevoise Data Blog

DECEMBER 10, 2024

In this post, we discuss how companies can comply with NYDFSs current approach by establishing internal governance committees, conducting a gap assessment against existing controls and standardizing due diligence processes, among other practical tips.

Compliance 52

Compliance Due diligence Law Law 52

Debevoise Data Blog

OCTOBER 31, 2023

The UK’s Approach to AI Regulation As set out in the government’s white paper on AI , the UK, unlike the EU, does not intend to implement AI-specific laws or regulations. One possibility is for the UK Financial Regulators to introduce standardized AI due diligence requirements that firms must satisfy before they can adopt third-party tools.

Due diligence 52

Due diligence Compliance Machine learning Data protection 52

Debevoise Data Blog

NOVEMBER 21, 2022

Covered entities must come into compliance with the provisions within 24 months after its entry into force, which depending on the date of publication will likely be December 2024 or January 2025. What are the key requirements for financial entities? DORA requires covered financial entities to comply with new rules in four key areas: 1.

Compliance 40

Compliance Due diligence Analytics Software 40

Legal Tech Monitor

JANUARY 6, 2025

Tom Dunlop shares the frustrations that sparked the idea for Summize, recounting his days as an in-house lawyer overwhelmed by the manual review of locked PDF contracts during due diligence. So this was mostly law firm, maybe some in-house folks that were looking at the product. Laura Proctor (00:34) Indeed.

Time-tracking 52

Time-tracking Due diligence Lawyer Analytics 52

Ikigai Law

JUNE 1, 2023

And prescribes enhanced ongoing due-diligence measures for them. But even if KYC norms are simplified and ambiguities are clarified – compliance with the letter of the law is not enough.REs’ internal KYC practices must be tailored to the unique levels of risk exposure that they face.

e-records 52

e-records Compliance Due diligence Law 52

Debevoise Data Blog

JANUARY 16, 2025

Existing laws, such as the Protecting Americans Data from Foreign Adversaries Act of 2024 (PADFAA), CFIUS authorities and earlier executive orders, [5] focus on transaction-specific reviews or sector-specific controls but lack broad restrictions on data transactions. DOJ expects U.S.

Compliance 52

Compliance Due diligence e-records Time-tracking 52