The UK Supreme Court, in a unanimous decision delivered on April 1,[1] has overturned the decision of the Court of Appeal which had found that Morrisons Supermarkets plc (“Morrisons”) could be held vicariously liable for the unauthorized actions of
Cleary Cybersecurity and Privacy Watch
Global Legal Developments related to Cybersecurity Incidents, Cyber Corporate Governance and Regulation Issues, and Privacy and Data Protection Laws
Cleary Cybersecurity and Privacy Watch, published by Cleary Gottlieb Steen & Hamilton LLP, focuses on legal developments and regulatory issues related to cybersecurity, data privacy, and emerging technologies. The blog covers topics such as GDPR compliance, data breach liability, AI-related cyber threats, government enforcement actions, and evolving privacy laws. It also addresses the intersection of cybersecurity with corporate governance, international trade, and regulatory compliance. The blog provides analysis of court rulings, legislative initiatives, and enforcement trends affecting companies and legal practitioners navigating cybersecurity and privacy challenges.
Latest from Cleary Cybersecurity and Privacy Watch - Page 13
Online Financial Service Companies: The Anti-Terrorism Act’s Next Frontier
The emergence of online, non-traditional financial service platforms creates additional avenues for terrorist groups to receive and transfer funds outside of the traditional banking system. One consequence of this trend is the potential for increased litigation against these providers under…
FINRA Releases Notice On Cybersecurity Measures In light of COVID-19 Pandemic
As firms respond to the ongoing coronavirus pandemic by increasingly transitioning to remote and telework arrangements, the Financial Industry Regulatory Authority (“FINRA”) issued an alert on measures that firms and associated persons can take to address resulting cybersecurity vulnerabilities:
- Measures
…
California AG Proposes Second Round of Modifications to CCPA Regulations
On Wednesday, March 11, 2020, the California Attorney General released a second set of modifications (the “March Revisions”) to the proposed regulations implementing the California Consumer Privacy Act of 2018 (the “CCPA”), including substantive changes to both the initial draft…
Managing Cyber Risk During COVID-19 Response
Efforts to contain COVID-19 have resulted in many employees working remotely for potentially an extended period of time. While such precautions are in place, it is important to stay vigilant of cybersecurity risks. There are already reports of COVID-19 related…
EDPB Publishes Statement on Privacy Implications of M&A Transactions
On February 19, 2020 the European Data Protection Board (“EDPB”) published its second statement on privacy in the context of corporate transactions.
The statement, the full text of which can be read here, highlights the existence of concerns related…
California AG Proposes Modified CCPA Regulations
On Friday, February 7, 2020, the California Attorney General released an amended set of proposed regulations (supplemented on February 10, 2020) implementing the California Consumer Privacy Act of 2018 (the “CCPA”), including substantial changes to the draft regulations issued in…
OCIE Cybersecurity and Resiliency Observations and Best Practices
On January 27, 2020, the U.S. Securities and Exchange Commission (“SEC”) Office of Compliance Inspections and Examinations (“OCIE”) issued examination observations related to cybersecurity and operational resiliency practices (“Examination Observations”). The observations highlight a set of best practices by market…
2019 Cybersecurity Developments: A Year in Review
In 2019, boards and senior management across a range of industries continued to cite cybersecurity as one of the most significant risks facing their companies.
At the same time, comprehensive data privacy regulation became a new reality in the United…
UK ICO Finally Issues GDPR Fine
The UK Information Commissioner’s Office (“ICO”) issued its first penalty notice under the GDPR in December 2019. Despite publishing notices of its intention to fine Marriott and British Airways in July 2019, the ICO has not yet taken its final…