Eversheds Sutherland Cybersecurity and Privacy Insights Blog
content top

Virginia is for lovers (of privacy)—The Consumer Data Protection Act passes into law

On March 2, 2021, Governor Northam signed the Virginia Consumer Data Protection Act (CDPA), making it the country’s second, enhanced state privacy law. It will likely not be the last. Set to take effect on January 1, 2023, the CDPA requires businesses to make significant enhancements to their privacy policies and to provide covered consumers with substantial...

California’s new privacy law, the CRPA, was approved: Now what?

On November 3, 2020, California voters passed Proposition 24, the California Privacy Rights Act (CPRA), by approximately 56-44%. This act will substantially amend the California Consumer Privacy Act (CCPA), once it goes into effect on January 1, 2023. Key points on this law:  Builds on the existing framework of the CCPA, while bringing the CCPA closer to Europe’s GDPR;imposes...

No rest for the weary: cybersecurity and privacy enforcement actions heat up

A recent wave of cybersecurity and privacy enforcement actions cautions businesses dealing in personal data to strengthen their security and compliance plans. The New York Department of Financial Services recently announced its first enforcement action under its cybersecurity regulation. The California Attorney General began enforcement-related inquiries under the newly enacted...

FinCEN advisory highlights increased cybercrime risks during COVID-19

FinCEN Advisory Zeroes in on Opportunistic Cybercrime During the COVID-19 Pandemic: Cybercriminals are hard at work taking advantage of weaknesses in remote processing; FinCEN issues Advisory highlighting red flags that compliance officers should be familiar with to help shore up compliance gaps; Advisory issuance signals possible increased attention by FinCEN on these crimes and...

The seismic shift of Schrems ll and what you can still do to transfer personal data to the US from the EU

If you transfer data from the EU to the US, or if your trusted service providers do, the Schrems II European Court decision has seismic significance— even if you do not rely on Privacy Shield, recent FAQs issued by the European Data Protection Board further highlight the changes: The FAQs provide further clarification on whether there is a “grace period” for those companies...

« Older Entries