Debevoise Data Blog

AUGUST 29, 2022

Additionally, on August, 29, 2022, the FTC released the final agenda for its September 8, 2022 Commercial Surveillance and Data Security Public Forum seeking public comment on the ANPR. In Part 3 of our Data Blog series, we focus on the FTC ANPR as it relates to data security.

Due diligence 52

Due diligence Compliance Software State law 52

Debevoise Data Blog

MARCH 5, 2024

On February 28, 2024, President Biden issued an Executive Order (the “ Order ”) designed to protect the “sensitive personal data” of Americans from “exploitation” by “countries of concern” or related “covered persons.” Sensitive personal data. national security by linking that data to individuals or groups. In addition, “U.S.

Compliance 52

Compliance e-records Federal law Court 52

3 Geeks and a Law Blog

JANUARY 23, 2023

Last week on 3 Geeks, I posted a blog that talked about how to use AI to generate summaries of legal articles. This week’s episode covers agency labor advisors, data rights, minimum wage for contractors and the strengthening VA Cybersecurity Act of 2020. AI Generated Librarian as a machine editing a podcast.

Hearing 130

Hearing Time-tracking Judge e-filing 130

Debevoise Data Blog

SEPTEMBER 29, 2022

In Part 1 of this Data Blog series, we provided an overview of the ANPR and the context for the FTC’s rulemaking process. In Part 2 and Part 3 , we discussed how the privacy-focused and data security-focused components of the ANPR may offer actionable takeaways for businesses.

Compliance 52

Compliance Law Law 52

Debevoise Data Blog

DECEMBER 8, 2020

On December 17, 2020 at 12:00pm ET, Luke Dembosky and Anna Gressel from Debevoise’s Data Strategy and Security Group will be joined by William Roberts, Acquisitions Chief for the U.S. To subscribe to the Data Blog, please click here. To RSVP for the live webcast, please click here.

Law 52

Law Law 52

Debevoise Data Blog

DECEMBER 19, 2022

As we approach the end of the year, here are the Top 10 Cybersecurity posts on the Debevoise Data Blog in 2022 by page views. If you are not already a Blog subscriber, click here to sign up. In this post, we discuss the key requirements under the proposed rules and key takeaways.

Compliance 52

Compliance Law Law 52

Debevoise Data Blog

JANUARY 14, 2022

2] Based upon these developments, companies subject to privacy and cybersecurity enforcement by the FTC should be cognizant of a number of judicial, regulatory, and legislative crosscurrents that impact the FTC’s investigative approach and enforcement authority. The aggressive nature of the FTC under Chair Khan has its critics.

Compliance 52

Compliance Court Litigator Litigation 52

Debevoise Data Blog

MARCH 18, 2024

Understand and Accurately Disclose the Risks Associated with AI Use: As more companies and firms adopt AI (including generative AI) as part of their core business functions, certain well-known risks associated with generative AI persist, such as quality control, privacy, IP, data-use limitations, cybersecurity, bias, and transparency.

e-filing 52

e-filing Machine learning Compliance Analytics 52

Law Technology Today

MARCH 7, 2023

Although many firms invest in security for their storage and archiving systems to protect existing documents, too many ignore the great vulnerability that faces their email data, avoiding the implementation of email encryption. The National Law Review reported that the average cost of data compromises reached $4.24M per breach in 2021.

Attorney 79

Attorney Law firm Defendant Software 79

Debevoise Data Blog

MARCH 5, 2023

On February 27, 2023, the FTC released guidance entitled “ Keep Your AI Claims in Check ” (“AI Claims Blog Post”), reminding companies that false or unsubstantiated claims about a product’s efficacy are core areas of FTC enforcement activity. We have previously written on how the FTC has entered into a new era under FTC Chair Lina Khan.

Compliance 59

Compliance e-filing Attorney Law 59

Debevoise Data Blog

JANUARY 8, 2024

As more companies adopt generative AI as part of their core business functions, certain well-known risks associated with generative AI persist ( e.g., quality control, privacy, IP, data-use limitations, cybersecurity, bias, and transparency). To subscribe to the Data Blog, please click here.

Litigator 52

Litigator Litigation e-filing Lawsuit 52

Debevoise Data Blog

MARCH 20, 2023

The Proposed Rules follow the SEC’s February 9, 2022 proposed cybersecurity rules for registered investment advisers and registered funds (“IM Cyber Proposal”) and March 9, 2022 cybersecurity rules for issuers (“Issuer Cyber Proposal”).

Compliance 40

Compliance 40

Debevoise Data Blog

JULY 28, 2022

On July 8, 2022, the California Privacy Protection Agency (the “Agency”) issued a Notice of Proposed Rulemaking , kicking off a forty-five day comment period for proposed updates to the California Consumer Privacy Act (“CCPA”) regulations. Detailed Requirements for Service Providers, Contractors, and Third Parties.

Due diligence 52

Due diligence Compliance Attorney Law 52

Debevoise Data Blog

APRIL 30, 2021

In this third installment, we discuss the Federal Trade Commission’s (“FTC”) recent blog post entitled “Aiming for truth, fairness, and equity in your company’s use of AI,” which was released on April 19, 2021. Be truthful and upfront about how you use data. which we discussed in detail in a previous blog post.

Court 52

Court Hearing Law Law 52

Debevoise Data Blog

FEBRUARY 28, 2022

Since we last wrote about data minimization , there have been several regulatory developments that illustrate the increasing operational and regulatory risks of keeping large volumes of old data. Starting in August 2021, the companies retained the data for three years, even if the user’s account had been dormant for multiple years.

e-filing 52

e-filing Compliance Litigator Litigation 52

Debevoise Data Blog

NOVEMBER 10, 2020

ICO targets the data broking industry : On 27 October, the ICO demanded that Experian make sweeping changes to data protection practices within its direct marketing business within three months or face further enforcement action.

Data protection 52

Data protection Intellectual Property e-records Machine learning 52

Debevoise Data Blog

JULY 12, 2022

On June 21, 2022, the House Energy and Commerce Committee formally introduced a new federal privacy bill: the American Data Privacy and Protection Act (“ADPPA”). The ADPPA aims to create a national framework that would preempt many, but not all, state privacy laws. We’ve previously written about the development of U.S.

State law 52

State law Federal law Compliance Data protection 52

Debevoise Data Blog

JANUARY 19, 2022

The Value of Cybersecurity Incident Response Plans As cyberattacks continue to plague U.S. companies, cybersecurity remains a core risk, even for businesses that have invested heavily in technical measures to protect their systems. Some attacks do not involve the compromise of data, and are largely handled by technical teams (e.g.,

Law 52

Law Law 52

Legal Tech Monitor

MAY 12, 2023

Much discussion on attorney-client confidentiality is centered around shielding sensitive information from unintended recipients, e.g., cloud-based cybersecurity or email encryption. This duty, however, does not require that the lawyer use special security measures if the method of communication affords a reasonable expectation of privacy.”

Attorney 59

Attorney Legal marketplace Legal research Lawyer 59

Debevoise Data Blog

AUGUST 18, 2021

The penalty resolves charges that Pearson misled investors related to a 2018 data breach. According to the SEC’s Order , on March 21, 2019, Pearson learned that millions of rows of data had been accessed and downloaded by a threat actor exploiting an unpatched security vulnerability.

Data protection 40

Data protection Software Law Law 40

Debevoise Data Blog

SEPTEMBER 20, 2021

As part of our ongoing series on enforcement actions by the Securities and Exchange Commission (“SEC”) in data- and cybersecurity-related matters ( here , here , and here ), we have been closely tracking regulatory developments and gathering insights on enforcement trends.

Due diligence 52

Due diligence Compliance Analytics Law 52

Debevoise Data Blog

APRIL 21, 2021

Data and Text Analysis : Using AI to analyze regulations, news flow, earnings reports, consumer complaints, analyst ratings changes, and legal documents. Credit Decisions : Utilizing AI to employ traditional and alternative data sources to inform, enhance, or supplement credit decisions.

Compliance 40

Compliance Defendant Law Law 40

Debevoise Data Blog

MAY 6, 2021

banking regulators made clear in their recent AI releases, existing laws such as Section 5 of the FTC Act, the Fair Credit Reporting Act, and the Equal Credit Opportunity Act already prohibit unfair, deceptive, and discriminatory uses of AI. model risk management, vendor management, data management, incident response plans, etc.)

Compliance 52

Compliance Due diligence Time-tracking Defendant 52