On November 30, 2020, the U.S. Department of Defense (“DoD”) will begin to roll out the new Cybersecurity Maturity Model Certification (“CMMC”) framework that eventually will require all DoD contractors, subcontractors, and suppliers to receive cybersecurity assessments from third-party assessment
Latest from Privacy, Cybersecurity & Technology Law Perspectives - Page 4
AI Podcast Series, Episode 1: Setting the Stage with Technology Risk Expert Ken DeJarnette – Part One
Foley is thrilled to partner with the California Technology Council on the Artificial Intelligence Podcast Series as part of our combined efforts to help foster high-tech innovation, collaboration, and growth across the state and beyond. The series dives deep into
ERISA/Cybersecurity Considerations in the COVID Age
“Because that’s where the money is,” was the famous quote fictitiously attributed to Willie Sutton when asked why he robbed banks. Given the trillions of dollars held by employee benefit plans, these plans are prime targets for cybercriminals. Plan participants
New Cybersecurity Assessment Requirement for Department of Defense Contractors Effective November 30, 2020
As of November 30, 2020, certain U.S. Department of Defense (“DoD”) prime contractors and subcontractors will need to complete a cybersecurity self-assessment prior to receiving new DoD contracts and prior to the exercise of new options under existing DoD contracts.
Brazilian Government Makes the LGPD Effective Imminently
On August 14, 2018, the Brazilian government approved the Brazilian General Data Protection Law, known as the Lei Geral de Proteção de Dados Pessoais (“LGPD”). Enforcement was set to begin on August 15, 2020 but then, due to COVID-19 was
Privacy Risks and Implications of Contact Tracing Apps and Related Technologies
Technology assisted contact tracing (“TACT”), including contact tracing apps, have quickly become a component in many organizations’ and communities’ plans to combat COVID-19. Just as quickly as TACT entered the conversation, so did privacy concerns. In the haste to implement
EDPB Issues FAQ After Schrems II, EU Regulators Provide Conflicting Interpretations and Guidance
Still grappling with the aftershocks of the Schrems II decision from the CJEU on July 16 (we previously discussed the Schrems II decision here), the European Data Protection Board (“EDPB”) has issued a Frequently Asked Questions (“FAQ”) discussing the
European High Court Invalidates EU-U.S. Privacy Shield but Upholds Standard Contractual Clauses
What Businesses Need to Know At-a-Glance
CJEU Decision
- Privacy Shield is invalid because U.S. surveillance programs permit unrestricted processing of EU data subjects and U.S. law provides little recourse for EU data subjects.
- Standard Contractual Clauses are still valid, but
Keys to AI IP Strategy: A Comprehensive Framework
This article outlines a framework for creating valuable patents for protecting AI technologies, as part of a series that covers topics including why to invest in patents for AI, how to overcome the biggest challenges in patenting AI,
Business Factors to Consider When Building Your AI Patent Portfolio
This is the third article in a series focused on creating a valuable patent portfolio for AI technologies, building on earlier discussions of why to invest in patents for AI and how to overcome the biggest challenges in patenting AI