Remove Blog Remove Compliance Remove Federal law
article thumbnail

Maturing Compliance with the Bulk Sensitive Data Rule (Data Security Program) before the July 8, 2025 Safe Harbor Expires

Debevoise Data Blog

On April 11, 2025, shortly after the first effective date of the DSP the National Security Division (NSD) of DOJ issued asuite of three policy and guidance documents to facilitate compliance with the DSP, including a 90 day civil enforcement safe harbor for good-faith compliance. Intelligence Community.

article thumbnail

CPPA Proposed Rulemaking Package Part 2 – Automated Decision-Making Technology

Debevoise Data Blog

The Draft Regulations note several federal law preemptions, including for entities and data subject to HIPAA, entities and data subject to the FCRA, and data subject to the GLBA. To subscribe to the Data Blog, please click here. The cover art used in this blog post was generated by DALL-E. Whats Next?

professionals

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Staying Compliant in U.S. Investigations: How to Protect Privacy Without Losing Momentum 

Lineal Services

For global organizations and international law firms, conducting internal investigations that involve U.S. privacy compliance depends on navigating a maze of federal statutes, state-level laws, and industry-specific regulations. Instead, U.S. Data Retention: A Double-Edged Sword U.S. and international standards.

article thumbnail

Preparing for AI Whistleblowers

Debevoise Data Blog

1] In March, the DOJ announced a new pilot whistleblower rewards program that reaffirmed its focus on AI, stating that prosecutors would integrate AI assessments into evaluations of corporate compliance programs and would seek “stiffer sentences” for AI misuse. [2] To subscribe to the Data Blog, please click here. 15, 2024). [4]

article thumbnail

New Requirements for Localisation of Major Internet Companies in Russia

Debevoise Data Blog

On 1 July 2021, [1] Federal Law No. 236-FZ on the Internet Activities of Foreign Entities in the Russian Federation (the “Law”) [2] came into force, requiring establishment of local presence, such as a branch, a representative office, or a subsidiary, for foreign Internet companies whose activities are focused on Russian users.

article thumbnail

Southwest’s Technology Troubles Accelerate DOT Action?

The North Carolina Journey of Law and Technology

However, federal law requires airlines to reimburse passengers for canceled or, in some situations, “significantly delayed” flights. In early January, the DOT issued a notice to “reaffirm its commitment to vigorously enforce the law to protect aviation consumers.” Department of Transportation (“DOT”) make things “right?”

article thumbnail

2024 Law Firm Data Security Guide: How to Keep Your Law Firm Secure

Clio

HIPAA : The Health Insurance Portability and Accountability Act (HIPAA) is a federal law that requires healthcare providers and “ business associates ” to protect protected health information (PHI) from inadvertent disclosure. Check out our blog post on understanding HIPAA compliance for more information.