Eversheds Sutherland Cybersecurity and Privacy Insights Blog
content top

Cybersecurity and data privacy foresight 2022

Last year’s relentless rate of change in the threat and regulatory environments for cybersecurity and data privacy will not soon abate in 2022, necessitating a forward-looking, risk-based and increasingly globalized strategy. At the same time, exciting new technologies continue to mature and open up new opportunities — as well as risks. Amidst this complexity and disruption,...

Colorado’s new privacy law: How it stacks up against other US privacy laws

Companies compliant with the GDPR and similar US state laws will have a substantial headstart with the Colorado Privacy Act. Recognizing the key differences will enable organizations with a well-designed compliance program to efficiently accommodate all these laws. The law provides for a mandatory universal consumer opt-out of targeted advertising, data sales and profiling.The Colorado...

Vaccinations in the Workplace: The Privacy Conundrum

COVID-19 vaccines are now widely available, signaling an eventual return to work. That is certainly welcome news for employees and employers alike, but employers are finding themselves in an unprecedented quandary—whether they can condition workforce re-entry on proof of employee vaccinations. The Equal Employment Opportunity Commission (EEOC) and state legislatures have generally...

Getting back when HACT: Congress’s idea to provide redress to recent cyberattacks

Amidst the ever-worsening onslaught of cyberattacks, companies are longing to go on the offensive, whether by “hacking-back” or by going after malicious actors in US courts. While Congress has previously refused to enable the former, it now appears more open to the latter, particularly with the introduction of the Homeland and Cyber Threat Act (the HACT Act): The HACT Act, if passed,...

Virginia is for lovers (of privacy)—The Consumer Data Protection Act passes into law

On March 2, 2021, Governor Northam signed the Virginia Consumer Data Protection Act (CDPA), making it the country’s second, enhanced state privacy law. It will likely not be the last. Set to take effect on January 1, 2023, the CDPA requires businesses to make significant enhancements to their privacy policies and to provide covered consumers with substantial...

« Older Entries