The Securities and Exchange Commission has filed a Complaint against eight traders, one alleged hacker, and others, in connection with a previously disclosed cybersecurity attack that infiltrated the SEC’s EDGAR system in 2016. The Complaint brings … [Read more] about SEC Files Complaint Against Hacker, Traders in EDGAR Data Breach Case
Time for a General Federal Privacy Law? Peter Swire Opens the Discussion on Potential Preemptive Effects
The IAPP article, “US federal privacy preemption part 1: History of federal preemption of stricter state laws,” written by Alston & Bird Senior Counsel Peter Swire and published on January 9, 2019, discusses the potential for a general U.S. … [Read more] about Time for a General Federal Privacy Law? Peter Swire Opens the Discussion on Potential Preemptive Effects
HHS Releases New “Health Industry Cybersecurity Practices”
On December 28, 2018, the Department of Health and Human Services (HHS) issued new voluntary cybersecurity guidance for the health care industry titled, “Health Industry Cybersecurity Practices: Managing Threats and Protecting Patients.” This … [Read more] about HHS Releases New “Health Industry Cybersecurity Practices”
Michigan Enacts Insurance Data Security Model Law
Michigan enacted the Michigan Data Security Act on December 28, 2018, imposing stringent cybersecurity measures on any person (individual or corporate) licensed by the Michigan Department of Insurance and Financial Services. Based on the 2017 NAIC … [Read more] about Michigan Enacts Insurance Data Security Model Law
South Carolina Insurance Data Security Law Now Effective
South Carolina’s prescriptive data security law for insurers took effect on January 1, 2019. Subject to specified exemptions, the law requires any person licensed pursuant to South Carolina insurance laws to take certain steps, including among other … [Read more] about South Carolina Insurance Data Security Law Now Effective