Privacy law is becoming more technically sophisticated. So should you.
Posted in Compliance and risk management, Privacy lawTag archives: United States
Posted in Compliance and risk management, Privacy lawUS Senate considers mandating 24-hour reporting requirement for ransom payments
Posted in Cybercrime, Cybersecurity, General, Ransomware
On September 28, 2021, the US Senate Homeland Security and Governmental Affairs Committee released a draft bill that would, among other things, require nearly all entities that make a ransom payment as the result of a ransomware attack against the entity to report the payment to the Director of the Cybersecurity and Infrastructure Security Agency … Continue reading
US SEC announces three actions charging firms for cybersecurity deficiencies
Posted in Cybersecurity, EnforcementUS banking regulators propose a rule for 36-hour notice of breach
Posted in Data breach
On December 18, 2020, the US Department of the Treasury (Office of the Comptroller of the Currency), Federal Reserve and Federal Deposit Insurance Corporation (FDIC) jointly announced a 53-page proposed rule that would require banks to notify their regulators within 36 hours of a “computer-security incident” that rises to the level of a “notification incident.” … Continue reading
