Remove Blog Remove Compliance Remove Due diligence
article thumbnail

Maturing Compliance with the Bulk Sensitive Data Rule (Data Security Program) before the July 8, 2025 Safe Harbor Expires

Debevoise Data Blog

On April 11, 2025, shortly after the first effective date of the DSP the National Security Division (NSD) of DOJ issued asuite of three policy and guidance documents to facilitate compliance with the DSP, including a 90 day civil enforcement safe harbor for good-faith compliance. Intelligence Community.

article thumbnail

GDPR Considerations When Developing and Deploying AI Models: The EDPB’s Opinion on Compliance

Debevoise Data Blog

The Opinion provides high-level views and considerations for DPAs to apply when assessing GDPR compliance associated with developing or deploying AI models, and provides a helpful indication on the EDPBs thought trajectory. Undertaking due diligence on the AI model/system providers data protection compliance.

professionals

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The European Union’s Digital Services Act: In Force from This Saturday, February 17, 2024, Including for U.S. Intermediaries (Guest Blog Post)

Eric Goldman

Marketa Trimble [Eric’s introductory note: I briefly addressed the DSA in this blog post , along with the attached meme. The application of some DSA provisions will likely be tested with respect to their compliance with the EU Charter of Fundamental Rights , such as the “crisis response mechanism” under DSA Article 36.

article thumbnail

Exploring the Future of Legal Innovation at The Masters Conference: Thought Leadership in D.C. and Social Media in Discovery and Investigations

CloudNine

For this blog, Im focusing on the session that explored the power and process of social media collection and analysis, which stood out as particularly timely and impactful. The session on social media was titled Unlocking Social Media Data, sponsored by SMI Aware, and examined the investigative value of social media evidence.

article thumbnail

Part 2 – Helpful Guidance on Managing (Non-Cybersecurity) AI Risks from Hong Kong’s SFC

Debevoise Data Blog

Cross-Functional Approach: Senior management should ensure that responsible staff from the business, risk, compliance and technology functions can effectively manage the LC’s adoption and implementation of AI LMs by possessing the relevant competence in AI, data science, model risk management, and domain expertise.

article thumbnail

FTC’s Consent Order Against Marriott: Expectations for Reasonable Security

Debevoise Data Blog

In this blog post, we discuss key provisions in the Consent Order, which not only underscore the FTCs expectations for (and enforcement of) reasonable security practices in the absence of specific regulations but also highlight the added compliance burden that companies may face in an enforcement action. For instance, the U.S.

article thumbnail

Streamlining Procurement: How RFPs Benefit Corporate Legal Teams and Law Firms

MatterSuite

Legal RFPs help evaluate and select service providers based on expertise, experience, geographic reach, pricing, and compliance. In this blog post, we’ll discuss the benefits of RFPs for legal teams and firms for effective procurement. This process eliminates the need for lengthy discussions and negotiations, which saves time.