Eversheds Sutherland Cybersecurity and Privacy Insights Blog
content top

No rest for the weary: cybersecurity and privacy enforcement actions heat up

A recent wave of cybersecurity and privacy enforcement actions cautions businesses dealing in personal data to strengthen their security and compliance plans. The New York Department of Financial Services recently announced its first enforcement action under its cybersecurity regulation. The California Attorney General began enforcement-related inquiries under the newly enacted...

The seismic shift of Schrems ll and what you can still do to transfer personal data to the US from the EU

If you transfer data from the EU to the US, or if your trusted service providers do, the Schrems II European Court decision has seismic significance— even if you do not rely on Privacy Shield, recent FAQs issued by the European Data Protection Board further highlight the changes: The FAQs provide further clarification on whether there is a “grace period” for those companies...

Accessibility—The hidden A in the CCPA

In the scramble to come into compliance before the January 1, 2020, deadline, companies may have overlooked a key—and potentially costly—requirement in the California Consumer Privacy Act (CCPA). Under the draft regulations to the CCPA, businesses are required to ensure that their internal and external notice and privacy policies are reasonably accessible to individuals with...

US Cybersecurity and Data Privacy review and update: Looking back on 2019 and planning ahead for 2020

The reality of cybersecurity and data privacy threats and regulations proved a sobering one for many companies in 2019. The cost of data privacy began to hit home in January, with French regulators imposing a record fine for General Data Protection Regulation (GDPR) violations, and with subsequent global data privacy fines increasing in amount and frequency throughout the year. As the...

January’s Privacy Blizzard

The start to 2019 provided scant respite from the frenetic pace of privacy and cybersecurity developments. Already this year, regulators have amended and enforced existing regulations; courts have issued significant interpretations of law; and legislators have proposed new rules aimed at increasing privacy obligations and liability for businesses. This alert highlights the pressing...

« Older Entries