Across topics and issues, borders and industries, we have the thought leadership you need to stay ahead of changes in the law.

Follow us:



DHS announces cybersecurity obligations for pipeline companies

The U.S. Department of Homeland Security (DHS) issued a security directive (Directive) that, for the first time, imposes mandatory cybersecurity requirements on companies in the pipeline...


NYDFS recommends critical new practices to reduce supply chain risk in wake of SolarWinds attack

On April 27, 2021, the New York State Department of Financial Services (“DFS” or the “Department”) released a report regarding its investigation into the response by ...


California AG Tweet draws attention to Global Privacy Control as opt-out mechanism

In late January, California Attorney General Xavier Becerra tweeted that consumers could use a new technology called the Global Privacy Control (GPC) to opt-out of the sale of their...


New York regulator issues cyber insurance risk framework with implications for insurers and insureds

On February 4, the New York Department of Financial Services (NYDFS) released Insurance Circular Letter No. 2 (2021), a Cyber Insurance Risk Framework (Framework) for insurers that write...


California AG submits CCPA regulations for approval – requests expedited review ahead of July 1

On June 1, The California Attorney General (CA AG) submitted the final text of the CCPA regulations to the California Office of Administrative Law (OAL) for approval. Though regulations...


Second modified CCPA draft regulations released—comments due March 27

On March 11, The California Attorney General (CA AG) released a second set of modifications to the proposed regulations implementing the California Consumer Privacy Act (CCPA).


California AG releases proposed CCPA regulations

On October 10, California Attorney General Xavier Becerra (CA AG) released proposed regulations to implement certain provisions of the California Consumer Privacy Act (CCPA).


The results are in: Modest changes to CCPA await the Governor’s signature

Since the California Consumer Privacy Act’s (CCPA) hasty passage in June last year and minor changes last September, the CCPA has vexed businesses working on compliance.


HIPAA penalty caps to be reduced and tied to culpability level

In a dramatic turn, the U.S. Department of Health and Human Services (HHS) has announced that effective immediately, penalties for many HIPAA violations will be subject to substantially...

Loading data