Cybersecurity Law

From Vulnerability to Violation: FDA Cybersecurity Requirements for Medical Devices and FCA Enforcement In June 2025, the US Food and Drug Administration (FDA) issued a final guidance titled Cybersecurity in Medical Devices: Quality System...

From Vulnerability to Violation: FDA Cybersecurity Requirements for Medical Devices and FCA Enforcement

Litigation Readiness: Seven Things to Keep in Mind - Novenber 2025 Data breach class actions inevitably follow from nearly every major security incident. Here are seven things in-house counsel can do to prepare...

Litigation Readiness: Seven Things to Keep in Mind - Novenber 2025

Beyond the Hype: Major Study Reveals AI Assistants Have Issues in Nearly Half of Responses Artificial intelligence assistants now have at least one issue in 45% of their responses to news questions, according to the most extensive...

Beyond the Hype: Major Study Reveals AI Assistants Have Issues in Nearly Half of Responses

Recent DOJ Settlements Highlight Risks for Subcontractors Handling Sensitive Government Information On September 30, the U.S. Department of Justice (DOJ) announced a $875,000 settlement with a university over failures to comply with the data...

Recent DOJ Settlements Highlight Risks for Subcontractors Handling Sensitive Government Information

Gouvernail des données de Blakes : édition de l’automne 2025 Voici l’édition de l’automne 2025 de l’infolettre Gouvernail des données de Blakes, une publication du groupe Protection de la vie privée et des...

Gouvernail des données de Blakes : édition de l’automne 2025

NYDFS Puts Third-Party Service Providers Under Regulatory Spotlight The New York Department of Financial Services (NYDFS) issued an industry letter titled “Guidance on Managing Risks Related to Third-Party Service...

NYDFS Puts Third-Party Service Providers Under Regulatory Spotlight

[Event] Government Contracting Forum on DOD Procurement, Compliance & Innovation - December 4th - 5th, National Harbor, MD ACI's Government Contracting Forum on DOD Procurement, Compliance & Innovation is your best chance to take advantage of new opportunities that...

[Event] Government Contracting Forum on DOD Procurement, Compliance & Innovation - December 4th - 5th, National Harbor, MD

Financial Markets and Funds Quick Take | Issue 43 From Enforcement to Empowerment: SEC Chairman Paul Atkins Charts a New Regulatory Approach for Digital Assets - SEC Chairman Atkins promoted a...

Financial Markets and Funds Quick Take | Issue 43

Key Amendments to China’s Cybersecurity Law On October, 28, 2025, the Standing Committee of the National People’s Congress approved amendments to the Cybersecurity Law of the PRC (the CSL)....

Key Amendments to China’s Cybersecurity Law

Fourth Circuit Weighs in on Standing in Data Breach Class Actions One of the hotly litigated issues in data breach class action litigation is whether plaintiffs in these actions have standing under Article III...

Fourth Circuit Weighs in on Standing in Data Breach Class Actions

Facial Recognition Technology Use in Stadiums: Key Takeaways The use of facial recognition technology in stadiums is becoming increasingly popular and has the potential to improve the visitor experience....

Facial Recognition Technology Use in Stadiums: Key Takeaways

Provisions in Singapore’s Cybersecurity (Amendment) Act came into force on 31 October 2025 The Cybersecurity Act 2018 (the 2018 Act) established Singapore's statutory framework for the oversight and maintenance of national...

Provisions in Singapore’s Cybersecurity (Amendment) Act came into force on 31 October 2025

California’s New Privacy Regulations: A Wake-Up Call for Businesses using ADMT and Conducting Other High-Risk Processing California continues to expand its privacy regulations, outpacing the federal government and impacting companies doing business in the state. The...

California’s New Privacy Regulations: A Wake-Up Call for Businesses using ADMT and Conducting Other High-Risk Processing

AI, Deepfakes, and Coverage Drift: What Policyholders Need To Know Now As companies accelerate adoption of artificial intelligence (AI) across operations, the cyber risk landscape is changing faster than most...

AI, Deepfakes, and Coverage Drift: What Policyholders Need To Know Now

The Fourth Circuit Used a Data Breach on the Dark Web to Illuminate the Boundaries of Standing Since the Supreme Court’s opinion in TransUnion LLC v. Ramirez, 594 U.S. 413 (2021), litigants and courts alike have struggled to determine...

The Fourth Circuit Used a Data Breach on the Dark Web to Illuminate the Boundaries of Standing

2026 CCPA Amendments: New Privacy Rules in California They say the only two certainties in life are death and taxes. Humbly, we’d like to propose a third: New California privacy rules. Going...

2026 CCPA Amendments: New Privacy Rules in California

US and UK Issue Joint Cybersecurity Guidance for Operational Technology Systems The United States’ Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI), in collaboration with the...

US and UK Issue Joint Cybersecurity Guidance for Operational Technology Systems

First Civil Penalty Imposed Under the Privacy Act The Federal Court's recent decision in Australian Information Commissioner v Australian Clinical Labs (No 2) [2025] FCA 1224 marks a turning...

First Civil Penalty Imposed Under the Privacy Act

UK Regulators Publish Effective Practices on Cyber Response and Recovery Capabilities The Bank of England, UK Financial Conduct Authority (FCA) and UK Prudential Regulation Authority (PRA) have published a joint document outlining...

UK Regulators Publish Effective Practices on Cyber Response and Recovery Capabilities

CHINA: Amendments to Cybersecurity Law Effective 1 January 2026 On 28 October 2025, China passed amendments to the Cybersecurity Law, marking the first update since its enactment in 2016. These amendments...

CHINA: Amendments to Cybersecurity Law Effective 1 January 2026

DOD Finalizes CMMC Rules, Adding Cybersecurity and False Claims Act Compliance Risks The US Department of Defense has issued its final rule implementing the Cybersecurity Maturity Model Certification program, effective November...

DOD Finalizes CMMC Rules, Adding Cybersecurity and False Claims Act Compliance Risks

FCC Announces Tentative Agenda for November 2025 Open Meeting Following a busy October agenda at the Federal Communications Commission (FCC or Commission) and despite the continuing government shutdown that...

FCC Announces Tentative Agenda for November 2025 Open Meeting

District court grants final approval to class action after data breach Recently, the U.S. District Court for the Eastern District of Pennsylvania granted final approval of a class action settlement arising from a...

District court grants final approval to class action after data breach

SEC Regulation S-P Amendments: New Incident Response Program Requirements In May 2024, the U.S. Securities and Exchange Commission (SEC) adopted amendments to Regulation S-P, requiring registered investment advisers...

SEC Regulation S-P Amendments: New Incident Response Program Requirements

AdvaMed modernizes its code of ethics for the digital era The Advanced Medical Technology Association (AdvaMed) announced its updated Code of Ethics on Interactions with US Health Care Professionals on...

AdvaMed modernizes its code of ethics for the digital era

Workplace Law Update: 10 Essential Items on Your November 2025 To-Do List Here are the top items you should tackle this November, based on the latest workplace law developments and upcoming critical compliance dates...

Workplace Law Update: 10 Essential Items on Your November 2025 To-Do List

Patent Case Summaries | Week Ending October 24, 2025 Centripetal Networks, LLC v. Palo Alto Networks, Inc., et al., No. 2023-2027 (Fed. Cir. (PTAB) Oct. 22, 2025). Opinion by Cunningham, joined by...

Patent Case Summaries | Week Ending October 24, 2025

Keep the Season Bright: Holiday Cybersecurity Tips for Retailers The holidays are upon us, and the last thing retailers want to do is respond to a security incident. Close behind, we’re sure, are changes...

Keep the Season Bright: Holiday Cybersecurity Tips for Retailers

Cybersecurity Awareness Month 2025: How to Preserve Privilege in Cyber Investigations In the aftermath of a cyberattack, forensic investigations are often launched under intense pressure to identify what went wrong, why, and how to...

Cybersecurity Awareness Month 2025: How to Preserve Privilege in Cyber Investigations

UK’s National Cyber Security Centre Releases 2025 Annual Review The United Kingdom’s National Cyber Security Centre (NCSC) has released its Annual Review for 2025. As in 2024, the report covers the UK’s cyber...

UK’s National Cyber Security Centre Releases 2025 Annual Review