The SEC filed three enforcement actions against investment advisers and broker-dealers for cybersecurity deficiencies after the firms experienced incidents that exposed customer and clien...
The SEC filed an enforcement action against a company for disclosing the risk that it “could” have a data privacy breach when it knew it already had experienced a breach. The action a...
Below is our latest report on developments in IP, data privacy and cybersecurity law. In this issue, we discuss, among other things, a variety of recent IP-related court decisions as well...
On June 8, Colorado’s legislature passed the Colorado Privacy Act (ColoPA), which will impose new, substantial privacy requirements on many businesses operating in Colorado. Colorado Go...
The Supreme Court yesterday found the administrative patent judges of the Patent Trial and Appeal Board to be unconstitutionally appointed but fashioned a tailored remedy by making their ...
The SEC filed an enforcement action involving a public company’s cybersecurity disclosure. The action highlights the need for executives responsible for SEC reporting to be informed pro...
The European Commission’s standard contractual clauses are the most widely used method by which personal data is lawfully transferred from the European Economic Area to countries, like ...
On April 5, 2021, the U.S. Supreme Court issued a long-awaited decision in Google LLC v. Oracle America, Inc., holding that Google’s copying of certain portions of Oracle’s Java SE AP...
The use of artificial intelligence and machine learning (AI) in the financial sector has become a high priority for the U.S. financial regulators. In a rare event, five of them have joine...
Three data breach enforcement examples, two under the GDPR and one in the U.S., highlight differences across the Atlantic in the mechanics of fines and civil penalties, including how and ...
