• |

    Jan. 15, 2025

Five Steps for Effective Board Oversight on Cybersecurity Breach Response

New cybersecurity regulations, along with an uptick in post-breach regulatory enforcement actions and civil litigation, continue to push corporate boards toward more active oversight of their organizations’ cybersecurity risks and programs. This increasing pressure leaves some boards questioning how and to what extent they should be involved in responding to significant cybersecurity incidents. In this guest article, Alston & Bird partners Kim Peretti and Cara Peterman, and senior associate Lance Taubin, address the evolving regulatory and litigation landscape impacting the board’s cyber-risk governance and the role of boards in overseeing breach response and related disclosures. They also offer five steps for effective board oversight of cybersecurity incident response. See “Twelve Steps for Engaging the Board of Directors and Implementing a Long-Term Cybersecurity Plan” (Sep. 16, 2020).

Children’s Privacy Grows Up: Examining New Laws That Now Protect Older Teens

Children’s online privacy is not just for tweens and half-pints anymore. Several state laws, both general and youth-specific, have strengthened data protection for minors up to age 18. This first article in a two-part series discusses the key pacesetter laws that emerged in 2024 to regulate minors’ online activities and examines the most significant trends shaping this increasingly difficult compliance area, with insights from experts at BakerHostetler, Entertainment Software Rating Board, Loeb & Loeb and SuperAwesome. Part two will provide practical advice on how companies can navigate the new and multi-layered legal constraints on teen privacy and safety. See our two-part series on the FTC’s NGL Labs settlement: “Key Violations and Settlement Terms” (Sep. 18, 2024), and “Compliance Lessons” (Sep. 25, 2024).

Navigating Ever-Increasing State AI Laws and Regulations

Recognizing individuals’ concerns about the potential for AI systems to yield erroneous or discriminatory outcomes or decisions, U.S. states have rushed to adopt applicable laws and regulations, relevant especially to systems deemed to involve certain high-risk functions like financial or employment-related decision-making. This article, distilling insights offered during a Husch Blackwell presentation, surveys the huge volume of AI-related legislation introduced and adopted, and regulations and guidance issued, in 2024. It also offers an outlook on AI legal and regulatory efforts expected in 2025, including proposed California regulations pertaining to automated decision-making technology and a Texas AI law focused on high-risk systems. See our two-part series on how to manage AI procurement: “Leadership and Preparation” (Sep. 18, 2024), and “Five Steps” (Oct. 2, 2024); as well as “AI Governance Strategies for Privacy Pros” (Apr. 17, 2024).

ZwillGen Launches AI Division in Washington, D.C.

ZwillGen has welcomed Brenda Leong and Jey Kumarasamy to its newly created AI division in Washington, D.C. Leong, the division’s director, and Kumarasamy, its legal director, arrive from Luminos.Law LLP as part of a group acquisition including lawyers, data scientists, proprietary processes and technology. For commentary from Leong, see “Deciphering California’s Pioneering Mandate for an AI Nutrition Label” (Oct. 16, 2024). For commentary from Kumarasamy, see our two-part series on New York City’s law requiring AI bias audits: “What Five Companies Published – and How Others Avoid It” (Sep. 13, 2023), and “A Best Practice Guide, From Choosing an Auditor to Avoiding Enforcement” (Sep. 20, 2023). For insights from ZwillGen, see our two-part series on the FTC’s NGL Labs settlement: “Key Violations and Settlement Terms” (Sep. 18, 2024), and “Compliance Lessons” (Sep. 25, 2024).

Most-Read Articles

Cybersecurity Awareness Month

Read the full brief here.

Spotlight on Trailblazing Women

To mark International Women’s Day 2024, women editors and reporters of ION Analytics interviewed outstanding women in the industries and jurisdictions we cover. In this part, Jill Abitbol, Managing Editor of the Cybersecurity Law Report and Anti-Corruption Report, features notable women in data privacy, cybersecurity, white collar defense, compliance and anti-corruption law, including Christina Montgomery, Leslie Shanklin, Palmina Fava, Alexandra Ross and Lucinda Low. Enjoy reading their inspiring remarks here.

We Celebrate Data Privacy Day 2024

Read the full brief here.

Spotlight on Trailblazing Women

In honor of International Women’s Day, some of ION Analytics' editorial teams led by women interviewed notable women in the markets and industries we cover. In this part, the Cybersecurity Law Report highlighted notable women in compliance and hedge fund, data privacy and cybersecurity, and anti-corruption law, including Amii Barnard-Bahn, Abigail Bell, Genna Garver, Jane Horvath, Barbara Li, Amy Mushahwar, Mara Senn and Carol Widger. The interviews are here.

 

 

 

Webinar on Compliant International Data Transfers

Listen here to our discussion with our colleagues at Ethos Privacy, which took place on March 1, 2022, on how to approach international data transfer challenges. 

Webinar on Getting a Handle on Vendor Contracts

A recording of the March 10 webinar can be accessed here. 

Cybersecurity Resolutions for 2021

In this quick take video, we talk about some of our cybersecurity resolutions for 2021.

Facial Recognition Concerns

In this short video, we discuss the privacy and bias concerns with facial recognition technology.

Planning for the Return to Work 

We discuss a few return-to-work privacy issues in this short video.

ACR and CSLR Spring Update 2020

The Senior Editors of the Anti-Corruption Report and the Cybersecurity Law Report recently teamed up to present an update on the trends and hot topics in the anti-corruption, cybersecurity and data privacy spaces since the beginning of the year and what the publications will be focusing on in the coming months. A complimentary download of the webinar is available here.

Upcoming Webinar: Companywide Work From Home - Cybersecurity and Privacy Best Practices

Please join us on Monday, March 23, 2020, from 12:00 p.m.- 12:30 p.m. EDT for a complimentary webinar discussing the cybersecurity and privacy challenges the shift to remote working has created and how to overcome them. Registration information for the webinar is here. 

Upcoming Webinar to Explore Best Practices for Alternative Data Use

Please join us on Wednesday, January 15, 2020, at 11:00 a.m. EST for a complimentary webinar hosted by our sister publication, the Hedge Fund Law Report, discussing issues relating to the use of alternative data by private fund managers. To register for the webinar, click here.

Upcoming HFLR/CSLR Webinar to Explore Strategies and Tactics for Conducting an Effective Tabletop Exercise

Please join the Hedge Fund Law Report and the Cybersecurity Law Report on Tuesday, July 30, 2019, at 1:00 p.m. ET for a complimentary webinar discussing the strategies and tactics companies can employ to conduct an effective tabletop exercise. GCs and CCOs are encouraged to invite their CISOs and CTOs to join as well. The webinar will be moderated by Shaw Horton, Associate Editor of the Hedge Fund Law Report, and will feature Luke Dembosky, partner at Debevoise, John “Four” Flynn, chief information security officer at Uber, and Jill Abitbol, Senior Editor of the Cybersecurity Law Report. Registration for the webinar is available here.

Anti-Corruption Webinar: How HPE Is Using Its New T&E Tool to Generate Compliance Metrics

Measuring the effectiveness of a compliance program can be tricky, but some companies are finding ways to use their existing internal controls to generate useful data. Join our sister publication the Anti-Corruption Report (ACR) for a complimentary webinar that explores Hewlett Packard Enterprises’ new travel-and-entertainment-approval tool. On Wednesday, March 27, 2019, from 1:00 p.m. to 2:00 p.m. EDT, the ACR’s Megan Zwiebel will interview Becky Rohr, vice-president of anti-corruption and global trade at Hewlett Packard Enterprises, about how they are using their T&E tool to measure and improve compliance. Registration information is here.