EU GDPR: User Consent & Controller Liability
For companies doing business in the EU, the new General Data Protection Regulation (GDPR) creates many pitfalls including the risk that a business may over- and under-comply with the GDPR. In our last post we introduced the general parameters of the new GDPR and how...
The New EU GDPR: A Privacy Regulation With Global Reach
If you have business interests in any country within the European Union (EU) you should evaluate whether and to what extent the EU’s newest privacy regulation — the General Data Protection Regulation (GDPR) — will affect your business. In this article, our second in a...
Information Security and Regulatory Risks
Every business, regardless of sector or industry, is covered by a privacy law or regulation. In our last two posts we addressed common cybersecurity threats, and the different types of cybersecurity exposures. In today’s post, we look at types of civil and regulatory...
Cybersecurity: Understand Your Exposure
A critical component of a good cybersecurity plan is an analysis of the insurance policies to make sure they cover the kinds of loss that leave your business most vulnerable. In our last post, we covered one of the most common cyber threats, the CEO Fraud or Business...
Is Your Business Prepared for the “CEO Fraud” Cyberattack?
One of the most common causes of loss for businesses in the cyber sphere is so-called CEO Fraud, or Business Email Compromise (BEC). According to the FBI’s Internet Crime Complaint Center (IC3), “the BEC scam continues to grow, evolve, and target businesses of all...
Sweeping Cybersecurity Regulations Proposed for All NY Financial Services Businesses
The New York Department of Financial Services (NYDFS) has proposed regulations that require all financial services businesses operating in New York to develop and maintain a comprehensive cybersecurity program. The regulations impose significant minimum cybersecurity...