Eversheds Sutherland Cybersecurity and Privacy Insights Blog
content top

Your quarterly privacy & cybersecurity update

Welcome to the third edition of Updata – the international quarterly update from Eversheds Sutherland’s dedicated Privacy and Cybersecurity team. Updata provides you with a compilation of privacy and cybersecurity regulatory and legal updates from our contributors around the globe over the past quarter. This quarter’s report features commentary on a number of interesting developments,...

Biometrics beware – Compliance and the Biometric Information Privacy Act

In light of the rising tide of costly class action lawsuits brought under the Illinois Biometric Information Privacy Act (BIPA), companies that use biometrics—even, in some cases, companies outside of Illinois that do not themselves collect biometric information—should be become familiar with this statute’s strict requirements. • Even photographs, when used for security purposes like...

The New Vendor Management World Under NYDFS’ New Cyber Regulation

As of March 1, 2019, the New York State Department of Financial Services’ (NYDFS) cybersecurity regulation, 23 NYCRR Part 500, requires financial services institutions regulated by NYDFS to implement policies and procedures to address the cybersecurity risks posed by third-party service providers to the institutions’ nonpublic information (NPI). Learn...

Malaysia seeks to expand personal data protection

Malaysia is looking to impose a data breach notification (DBN) requirement to its existing data privacy law, which would impact companies around the world who do business in Malaysia. The Malaysian Personal Data Protection Commissioner is currently hearing feedback on Public Consultation Paper No. 1/2018, which would impose a DBN requirement on companies that need to be registered with...

A week of “firsts” in cryptocurrency prosecution

On September 11, 2018, a number of “firsts” occurred in the prosecution of cryptocurrency-related activities at the Securities and Exchange Commission (SEC), the Financial Industry Regulatory Authority (FINRA), and federal district court that will likely become the norm going forward. The SEC announced its first enforcement action for an investment company registration violation...

« Older Entries Next Entries »