Debevoise Data Blog

MAY 17, 2024

Firms will have either 18 or 24 months (depending on size) from the date of publication in the Federal Register to come into compliance. We discuss Reg S-P’s new and expanded requirements, as well as considerations for compliance, below. A comparison of Amended Reg S-P to the Proposed Amendments is available here. 17 CFR § 248.30(a)(3).

e-records 52

e-records Compliance e-filing Due diligence 52

Debevoise Data Blog

JUNE 11, 2024

state law developments all reinforce the incentives for companies to adopt AI governance programs. Create a roadmap for compliance. The Law includes a list of technologies that are expressly excluded from the definition of high-risk AI systems, including, e.g., calculators, databases, spreadsheets, and databases.

Law 40

Law Law Compliance Attorney 40

Debevoise Data Blog

DECEMBER 22, 2023

The intersection between GDPR compliance and AI has been the subject of detailed analysis in a previous blog post. Following concerns that ambiguities in the definitions gave rise to a risk of circumvention, the Guidelines clarified that: “Information” includes both non-personal and personal data, regardless of how it was stored and by whom.

Data protection 52

Data protection Time-tracking Compliance Machine learning 52

Debevoise Data Blog

DECEMBER 1, 2021

Information Privacy Law. Addressing the medical privacy essentials: HIPPA and the new challenges posed by the rise of telemedicine, especially during the Covid-19 pandemic, this chapter closely examines medical privacy and it contains helpful practice notes pertaining to HIPPA’s intricate definitions and requirements.

Law 52

Law Law Data protection Litigation 52

Debevoise Data Blog

MAY 23, 2022

Here, we highlight key aspects of the CTPA with a focus on the provisions that companies should consider in their compliance preparations. We also provide an overview of the CTPA’s enforcement mechanisms and explain how the CTPA modifies prior laws’ safe harbor with a nod towards prosecutorial discretion. CTPA § 1(26). CTPA § 1(6).

Law 40

Law Law Compliance Attorney 40

Debevoise Data Blog

APRIL 29, 2022

Bottom Line : While the narrower scope of consumer rights under the UCPA may ease compliance burdens, companies will need to determine whether they will be able to take a standardized approach for offering consumer rights under the UCPA and State Privacy Laws, or whether they will need to address rights on a state-by-state basis.

Law 52

Law Law Data protection Attorney 52

Legal Tech Monitor

SEPTEMBER 4, 2023

So there’s corporate and IP and employment and all of that, and our own internal privacy compliance as well. So that’s definitely a, you know, the automation is definitely something that helps uncover, you know, the, the not just the good data that’s out there. So it definitely has impact cross functionally as well.

Time-tracking 52

Time-tracking Hearing Compliance e-records 52

Debevoise Data Blog

OCTOBER 18, 2021

Illinois’ Biometric Information Privacy Act (“BIPA”) excludes both “digital photographs” and “information derived from” photographs from the definition of “biometric information.” State Laws Permitting but Regulating Collection and Use of Biometric Identifiers, including Facial Data.

Law 52

Law Law Court Time-tracking 52

Legal Tech Monitor

JULY 11, 2023

He announces SessionGuardian will offer free CLE courses on cybersecurity awareness and compliance. Firms should look beyond check-the-box compliance to make privacy and security central in their culture. So I definitely think data. Not all, I believe only one or two state laws in the US require it.

Law firm 52

Law firm Time-tracking Due diligence Attorney 52

Debevoise Data Blog

JULY 12, 2022

Even if not enacted, its provisions are likely to influence a future federal privacy law. And, in many ways, the ADPPA may set a new minimum standard that will shape any state laws passed to fill the void left by the lack of a federal privacy law. We’ve previously written about the development of U.S. ADPPA § 2(9).

State law 52

State law Federal law Compliance Data protection 52

Debevoise Data Blog

OCTOBER 26, 2021

This would seem to eliminate not just the possibility of compliance-by-signage but also the possibility of online consent. This approach can be a hard sell for lawyers talking to their business-side clients, for whom being a compliance volunteer is rarely popular. Compliance. Has the company obtained those individuals’ consent?

Compliance 52

Compliance Federal law Data protection Machine learning 52

Debevoise Data Blog

JULY 9, 2021

Colorado has just adopted a brand-new data privacy law and Nevada has just significantly amended its law. These changes add rights for consumers, and compliance obligations for businesses, that take the U.S. further in the direction of European-style privacy law.

Data protection 40

Data protection Attorney Compliance State law 40

3 Geeks and a Law Blog

JUNE 28, 2023

But I believe there are regulations coming out of Texas, Washington, and California, the California law might actually have sunsetted, earlier this year, but there are state laws coming up, kind of like data privacy regulations, which we often call a patchwork, because they’re slightly conflicting.

Litigator 147

Litigator Litigation Court e-discovery 147

Legal Tech Monitor

JUNE 28, 2023

But I believe there are regulations coming out of Texas, Washington, and California, the California law might actually have sunsetted, earlier this year, but there are state laws coming up, kind of like data privacy regulations, which we often call a patchwork, because they’re slightly conflicting.

Litigator 52

Litigator Litigation Judge Court 52