On June 10, 2021, China adopted a new Data Security Law that will impact every business operating in or doing business with China. The law, which will take effect in less than a month (September 1, 2021), is sweeping in
Security, Privacy and the Law
Legal Perspectives on the Expanding Universe of Information Security & Privacy Issues.
Latest from Security, Privacy and the Law - Page 8
Biden Issues Memorandum Aimed at Improving Cybersecurity
On July 28, 2021, President Biden issued a Memorandum on Improving Cybersecurity for Critical Infrastructure Control Systems. The Memo recognizes that the protection of the nation’s critical infrastructure lies not only with government, i.e., at the federal, state, local,…
Briefings on HIPAA: CISA, FBI issue joint warning, mitigation tactics on TrickBot malware
By Colin Zick
Foley Hoag partner and Co-Chair of the firm’s Privacy and Data Security Practice, offers his insights, along with those of the Cybersecurity and Infrastructure Security Agency (CISA) and FBI regarding spear-phishing campaigns using TrickBot malware throughout North America.
Read the…
Will “stopransomware.gov” Actually Stop Ransomware?
By Colin Zick
In response to the spate of ransomware attacks, the United States has launched a website, www.cisa.gov/stopransomware. According to the government press release, the website’s aim is:
to help public and private organizations defend against the rise in ransomware cases.…
Virginia’s New Data Privacy Law: An Uncertain Next Step for State Data Protection
By Colin Zick
Virginia’s New Data Privacy Law: An Uncertain Next Step for State Data Protection
On March 2, 2021, Governor Ralph Northam signed the Virginia Consumer Data Protection Act (“VCDPA”) into law. This made Virginia the second state to enact a consumer…
Kaseya VSA Cyberattack: What Kaseya and the Feds Are Saying
By Colin Zick
If you aren’t following the ransomware attack on Kaseya’s VSA product and approximately 200 of its users, you should be. Like many cyberattacks, this one came on the verge of a holiday weekend. As the company itself notes, “Kaseya’s VSA product has…
In Van Buren v. U.S., Supreme Court Clarifies Scope of CFAA, the Federal Anti-Hacking Statute
By Aaron Lang
In Van Buren v. United States, the Supreme Court has issued its first ever opinion interpreting the Computer Fraud and Abuse Act. The CFAA, originally conceived as an anti-hacking statute, broadly prohibits, and imposes civil and criminal penalties for,…
Join Us: Cyber Risk, Hacking Ransom, and Insurance
By Foley Hoag
The risks of owning and operating a business continue to change, and we must all adapt to survive and thrive.
Please join Foley Hoag partner Colin Zick- and a great panel of experts and advisors – to learn what you…
U.S. Department of Homeland Security Announces New Cybersecurity Requirements for Critical Pipeline Owners and Operators
By Colin Zick
On May 27, 2021, the Department of Homeland Security’s Transportation Security Administration (TSA) announced a Security Directive that will enable DHS to better identify, protect against, and respond to threats to critical companies in the pipeline sector. (And for those
…
Cybersecurity Best Practices for Retirement Plans: How to Prepare for the Coming Department of Labor Cybersecurity Audits
By Ellie Kang
Are your employer-sponsored retirement accounts exposed to cybersecurity threats? How should you and those who are entrusted with your retirement assets mitigate cybersecurity risks? The official who leads the Employee Benefit Security Administration of the U.S. Department of Labor (…