• Why should you care? The SEC has brought enforcement actions before based on data breach disclosure-what’s different now?  
• Will this bring on a flood of disclosure about security incidents?
• What is the “materiality” standard and how does it apply here? 
• Do the final rules actually do away with the aggregation of incidents principle as outlined in the proposed rules? 
• How the SEC will be checking your defined terms in your incident response plans-make sure your terms are consistent across all incidents and across all functions 

Read our key takeaways blog post on the Final Rules here for more information.

• The National Cybersecurity Strategy framework, highlighting key takeaways of the five pillars:
• i) defend critical infrastructure; ii) disrupt and dismantle threat actors; iii) shape market forces to drive security and resilience; iv) invest in a resilient future; and v) forge international partnerships to pursue shared goals; and
• The role of the federal government to help stabilize insurance markets against catastrophic cyber events and foster business continuity as organizations navigate the global challenges of cybercrime.

• Why it is difficult to combat cybercrime and hold criminals accountable
• The importance of multijurisdictional cooperation and public-private partnerships in fighting cybercrime
• How geopolitical challenges and tensions will impact the outlook of cybercrime
• What global companies and boards should understand about threat actors as cybercrimes become increasingly sophisticated in today’s environment

Want to Learn More?Stay tuned for part two of this podcast series, which will focus on the National Cybersecurity Strategy.

• The data protection regime in the UK post Brexit and what lies ahead
• Trends and issues that we are seeing from an EU perspective
• Key developments and significant changes on the horizon outside of the EU

For a more in-depth summary, view our blog post on 2023 trends and predictions linked here.

• What is the metaverse? Who controls it? What are the types of immersive applications and business uses?
• Big ticket privacy issues for businesses who are entering or wish to establish a metaverse presence
• The range of laws and implications including online safety, bystander privacy and online surveillance

• an overview of the key laws that govern biometric data
• enforcement and litigation trends in this space
• considerations for in-house attorneys with regard to biometrics in the context of their privacy and security programs

• How market trends (inflation, a high dollar and recent layoffs) are impacting M&A activity
• Various approaches (from the buy-side and sell-side) to evaluate risk and privacy program maturity
• Tips to manage risk in the deal with respect to timing and the merger agreement itself
• Outlook for companies who want to take advantage of current opportunities

• How GDPR has influenced legislation in the region, including in key jurisdictions such as Vietnam, Thailand, China and Japan
• Practical considerations for companies to ensure compliant activities in light of the recent changes in privacy law requirements
• Key data privacy trends and developments in the region to expect in 2022 and beyond

• overriding themes that have characterized the last year of US class action litigation
• cybersecurity and data privacy trends and significant developments in the class action space, including post-Ramirez standing challenges and the effect of new state legislation
• best practices for preparing for class action litigation and predictions for the years ahead

• An overview of the new law, including key elements such as mandatory reporting requirements, timelines and which “critical infrastructure” sectors are affected by the legislation
• How the scope and ambiguity of the new law impacts organizations and complicates the response process effort
• What to expect in terms of engaging with CISA and how to preserve privilege applying to such communications
• How to manage and coordinate the new reporting mandates with existing incident reporting obligations
• Suggested action items to help companies address top-of-mind concerns and challenges they encounter as ransomware continues to be a prevalent threat

• How often companies and data protection officers should review their notices
• Employee vs. customer privacy notices
• Online vs. offline privacy notices
• Language requirements and more

● Cy’s background as the former Manhattan District Attorney for 12 years, including his experience focusing on cybersecurity issues and building the District Attorney Office’s capability to address emerging threats to critical infrastructure

● Key steps to prepare for and protect against cyber-attacks in this current threat environment

● Ransomware payments and what factors organizations may want to consider from both public policy and practical perspectives in deciding whether to pay a ransomware actor

● Log4j: what it is and why it’s important

● What organizations should be doing to prepare for and prevent a security event

● Legal risks and potential issues associated with this vulnerability

● How the tool helps organizations understand the current state of their data management and protection when using and sharing data

● What led to the development of the tool, how it works and the feedback it provides

● How the tool’s output helps companies facilitate conversations to ensure a balance of business purpose, risk management and maximizing benefits of data

● the types of certificates being issued

● how the certificate will work

● features of the certificate

● data protection around personal information and certificate

● The evolution of the SEC’s focus on cybersecurity, particularly with regard to financial institutions

● An insider’s take on what may trigger SEC investigation

● What’s in store with the Biden administration and how companies should prepare

● how the use of AI in hiring and recruiting can open companies up to new liabilities

● what the December 8th letter to the EEOC on AI hiring tools reveals about potential scrutiny of these tools under the Biden administration

● Brad’s suggestions for companies using or considering using AI-powered hiring tools

● What’s new in this edition of the survey

● Key trends identified

● What’s on the horizon for cloud with the new Biden administration

● an overview of what the guidance says

● why the ICO decided to release guidance in regards to this incident

● how companies should best approach the 72-hour notification rule.

● the immediate privacy issues to consider in regards to the vaccine

● whether a privacy impact assessment is warranted

● the privacy perspective on employers mandating vaccination.

● What went wrong in the case, and why those failures remain relevant today

● How companies can avoid becoming a target for a major cybersecurity enforcement case

● Jessica’s thoughts on trends in government enforcement in cybersecurity in light of a new incoming administration

● Diligence companies should perform on vendors prior to completing a transaction

● Contractual provisions that can be implemented to mitigate risk

● Tips on negotiating with vendors who aren’t keen to compromise

We take a look at:

● the implications for platforms and the businesses who rely on them

● the threshold questions – which arrangements does the regulation apply to?

● the dispute resolution curve – including the interplay between the complaint handling mechanism and mediator requirements

● and finally, we discuss some of the more thorny questions we have encountered so far when advising clients, such as termination for convenience, ranking and differential treatment.

● Overview of the final version of the UK ICO’s Age-Appropriate Design Code of Practice for Online Services

● Things companies should do now to address the new code

● General guidelines to follow in the US in regards to children’s data

● Takeaways from the recent guidance from the ICO on contact tracing apps

● Key privacy considerations as the use of contact tracing apps becomes a reality in the midst of the COVID-19 pandemic

● Developments at the EU level regarding contact tracing apps and mobility data

Download and listen to learn:

● How consumer behavior may be altered and what that means for brands

● How tech will help brands become more effective in the future

● Alyssa’s tips for CG&R companies doing business now and in a post-pandemic world

● The benefits of using e-signature over traditional pen and paper

● Examples of areas of law where e-Signatures may not suffice

● Practical considerations to be made when choosing to execute a contract via e-signature

● A summary of the current regulatory environment in the US regarding to privacy and telehealth

● How US authorities taken steps to promote telehealth, including by announcing changes in enforcement

● Amy’s thoughts on what telehealth providers should be thinking about going forward

● Lothar’s predictions for timing and substance of the final CCPA regulations

● Aspects of the draft regulation that may pose issues as stands

● Potential new privacy legislation to come from California in the future

● If Italian employers can perform temperature checks on employers and visitors

● What measures can be taken by Italian employers to protect their workforces

● Actions Italian employers can take if they discover an employer has COVID-19

● An outline of the major players and issues surrounding acquisition of healthcare data.

● The number one issue keeping healthcare GCs up at night.

● Details on regulatory restrictions emerging to protect healthcare data.

● How next generation intellectual property assets are affecting the type of M&A transactions being pursued

● How ”compliance culture” diligence can help companies navigate potential privacy issues in transactions

● Bill’s tips for companies acquiring tech targets

● The key findings of the report, which were pieced together following 700+ conversations with industry leaders around the world

● Challenges and opportunities arising for Industrial companies as technology and the world evolves

● Nikolaus’ thoughts on why sustainability has become a major issue affecting the industry now and in the future

● Examples of digital transformation across the Energy, Mining and Infrastructure industry

● Trends in investments in smart power and impact on consumers

● Jose’s thoughts on key legal issues and regulatory challenges around data and technology in the industry

● What clients are calling “the scariest aspect” of the CCPA

● How class action plaintiffs might bring suit outside of the data breach context

● Teresa’s practical tips for how companies can help protect themselves from litigation arising from the CCPA

In this episode, you will hear:

● The differences between connected cars and autonomous vehicles

● An overview of key legal developments surrounding the technology, including liability and data protection issues

● Raffaele’s thoughts on how future regulation will need to strike the right balance for all stakeholders involved

In this episode, you will learn about:

● What to expect during the transition period, which lasts until December 31, 2020

● Potential changes in international data transfers after the transition period expires

● Practical steps from a data protection perspective that companies should consider taking to prepare for the end of the transition period

In this episode, you will learn:

● What advice and guidance came from the EDPB

● The basics elements of the extraterritorial application of GDPR

● Key aspects, concerns, and practical tips relating to the EDPB’s recently released guidelines on territorial reach

In this episode, you will learn about:

• What happens when Austrian data protection authorities follow up on a data breach notification

• Whether having a “file early, file often” approach is beneficial or detrimental when it comes to potential data breaches

• What the authorities focus on the most during their investigations and how a company can get all the formalities right

In this episode, you will learn about:

• Definitions of AI and how these inform policy and regulation

• Trends in AI legislation in the US and globally

Recommendations, guidance, and advice on navigating the changing regulatory landscape for companies currently deploying AI or considering deploying AI

• What cookies and trackers are and how they work

• Whether the usage of these cookies and trackers constitute a sale under the CCPABrandon’s predictions on further developments and solutions, as well as his tips on how companies should tackle this issue

• What this opinion means for the resolution of the case

• View of the AG on standard contractual clauses and how this may affect companies from a practical perspective

• Commercial implications of a final decision on Shrems II that follows the AG’s opinion

• An overview of the new law — what’s covered, key requirements, and when it comes into force

• What the penalty structure will look like and whether there are private rights of action

• Flavia’s tips for how companies can prepare for the new law

• Key trends identified through the survey
• Tips and strategies for managing multiple provider cloud implementations
• Best practices for navigating data residency requirements

• The Planet49 case and the ruling of the Court of Justice of the European Union
• Broader implications this case has beyond sweepstakes operators, how it will impact all website operators, and the huge elements of change in regards to cookies and affirmative consent
• Open questions following the case