Eversheds Sutherland Cybersecurity and Privacy Insights Blog
content top

FTC Orders Data Security Auditors to Provide PCI DSS Assessment Data

On March 7, 2016, the Federal Trade Commission (“FTC”) ordered nine data security auditing companies to provide detailed information within 45 days about how they conduct assessments of companies when measuring their compliance with the Payment Card Industry Data Security Standards (“PCI DSS”).  The FTC announced it is specifically seeking information about “the assessment process...

EU-U.S. Privacy Shield – Full Text Released

On February 29, 2016, the European Commission released the text of the EU-U.S. Privacy Shield. The text reveals the details of a new framework that will place stronger obligations on U.S. companies to protect the personal data of EU citizens. It will also involve heightened compliance requirements and authorizes enforcement measures by the U.S. Department of Commerce (Commerce) and the...

EU-US Privacy Shield: European Union and U.S. Reach Agreement in Principle for New Data Transfer Framework – But Uncertainty Remains

On February 2, 2016, the European Commission (EC) and the U.S. Department of Commerce (Commerce) announced that they had reached agreement on a new data transfer safe harbor arrangement for the transfer of personal data from Europe to the U.S. The new safe harbor pact, called the EU-US Privacy Shield, was negotiated in the wake of the EU Court of Justice’s (CJEU) decision in October...

President Establishes Federal Cybersecurity Commission

The President has established a Commission on Enhancing National Cybersecurity within the Department of Commerce. Under a Feb. 9, 2016 executive order, the new advisory commission will consist of 12 members appointed by the President. The goal of the Commission will be to make detailed recommendations for actions that can be taken over the next decade to “strengthen cybersecurity in...

President Issues Executive Order Establishing New Sanctions Regime to Combat Cyber Attack Threats

On April 1, 2015, President Obama issued Executive Order 13694, which effectively establishes a new sanctions regime designed to combat cyber-attack threats. Specifically, this Executive Order grants authority to the Secretary of the Treasury, in consultation with the Attorney General and the Secretary of State, to impose sanctions on individuals and entities that are found to be...

« Older Entries Next Entries »