As we approach the end of the year, here are the Top 10 Webcasts on the Debevoise Data Blog in 2023 by page views. If you are not already a Blog subscriber, click here to sign up.


1. NYDFS Cybersecurity Final Amendments (November 28, 2023)

In this webcast, we examined the final amendments to Cybersecurity Regulation, 23 NYCRR Part 500, announced by the NYDFS on November 1, 2023. They discussed what changes made it into the final version, and the implications that the final rules have for NYDFS-regulated entities. Important issues covered included: (1) timing for implementation of the new rules; (2) the final definition of Class A companies and what is required of them; (3) changes to the multi-factor authentication obligations; (4) new business continuity and disaster recovery requirements; (5) final audit and risk assessment procedures; and (6) revised annual certification obligations and what now constitutes a violation of Part 500. We discussed the final amendments here. A redline of the Final Amendment against the version of Part 500 that is currently in effect can be found here.

To access an on-demand recording of this webcast, please click here.


2. ChatGPT and Other Generative AI – Adoption, Governance, and Compliance Lessons for Insurance Companies (May 12, 2023)

In this webcast, we hosted an informative discussion on ChatGPT and other Generative AI policies for insurance companies, covering: (1) various approaches to adopting Generative AI, including bans, licenses, and pilot programs; (2) examples of generally permitted and generally prohibited use cases; and (3) governance over and compliance with Generative AI policies and how that fits into larger structures. Our accompanying two-part blog post on ChatGPT can be found here and here.

To access an on-demand recording of this webcast, please click here.


3. Tips for Adopting Generative AI (October 23, 2023)

In this webcast, we reviewed some of the key challenges for deployment of AI systems, along with special guest, Andrew McLaughlin, Co-founder & Partner at Higher Ground Labs. We also discussed a practical framework for analyzing AI adoption risk and some of the other decisions relating to adoption of AI and implementation of governance programs. Key topics included: (1) a four-factor framework for analysis of AI adoption risk; (2) the evolving menu of enterprise Generative AI tools and the associated risks and benefits of each; (3) how to use your own documents to enhance AI use cases (fine tuning vs. RAG); and (4) validation of generative AI models and deciding whether a particular model is fit for purpose. Our accompanying two-part blog post on ChatGPT can be found here and here.

To access an on-demand recording of this webcast, please click here.


4. What the New EU Digital Operational Resilience Act Means for the Insurance Sector (June 26, 2023)

In this webcast, we delivered the latest installment of the Debevoise London insurance industry webinar series, focusing on the European Union’s Digital Operational Resilience Act (DORA) and what it means for the Insurance Sector. Topics included: (1) the history and context of DORA; (2) management obligations and the role of the Board; (3) incident reporting, operational resilience testing, and third-party risk management requirements; and (4) building towards compliance.

To access an on-demand recording of this webcast, please click here.


5. From Hacker to Defender: Conversation with a Mastermind Hacker (February 7, 2023)

In this webcast, Debevoise partner Erez Liebermann hosted Vladimir Drinkman for a conversation about the hacks, the prosecution and Mr. Drinkman’s role now as he looks to help companies facing today’s cyber threats. Mr. Drinkman participated in the largest credit and debit card hacking to date. He was arrested in Amsterdam and served time after receiving a 12-year sentence. Mr. Drinkman was a mastermind hacker, identifying methods to infiltrate companies and then move laterally within the organization. Mr. Liebermann was working at the U.S. Attorney’s office at the time and, together with the U.S. Secret Service, spent his days tracking Mr. Drinkman and looking to bring him to justice. Mr. Drinkman and his team hacked into NASDAQ, Heartland Payment Systems, JCPenney, Visa and other companies.

To access an on-demand recording of this webcast, please click here.


6. Getting Ready for the New SEC Cyber Rules for RIAs and BDs (March 22, 2023)

In this webcast, we discussed the SEC’s proposed cybersecurity rules for registered investment advisers (“RIAs”) and funds, broker-dealers (“BDs”), and other major market participants and the SEC’s proposed amendments to Reg S-P. This webcast covered: (1) the SEC’s proposed cybersecurity rules for RIAs and BDs and S-P amendments; (2) lessons learned from recent SEC cybersecurity exams and enforcement trends; and (3) getting ready for compliance with the rules.

To access an on-demand recording of this webcast, please click here.


7. AI and Private Equity (December 13, 2023)

In this webcast, we discussed how PE firms are using AI and ways to identify and mitigate AI-related risks. Key takeaways from the discussion included answers to the following questions: (1) how are PE firms currently using AI; (2) what are the regulatory or other risks that may be associated with the use of AI by a PE firm and its portfolio companies; (3) how should PE firms approach AI policies, procedures and governance; and (4) how can PE firms harness the potential of AI while also mitigating the potential risks associated with its use, and how can they help their portfolio companies do the same.

To access an on-demand recording of this webcast, please click here.


8. Cybersecurity Threats, Regulatory Developments, and the Role of Lawyers – for NY State Cyber CLE Credit (September 20, 2023)

In this webcast, we discussed the latest cybersecurity threats and regulatory developments, as well as tips for lawyers on how to prepare for and respond to cyber incidents. Key topics included: (1) major trendlines; (2) the current cybersecurity threat landscape; (3) regulatory developments; (4) the role of lawyers in incident preparation and response; and (5) tips for preventing and responding to cyber-attacks.

To access an on-demand recording of this webcast, please click here.


9. SEC Cybersecurity Rules for Issuers – Part 3: Practice Guide Q&A (December 8, 2023)

In this webcast, we discussed practice tips to implement the SEC’s new cybersecurity rules. For more information about the SEC’s cybersecurity rules, see our posts here and here.

To access an on-demand recording of this webcast, please click here.


10. ChatGPT Interviewed ChatGPT on the Role of ChatGPT in the Legal Profession (Febuary 22, 2023)

In this webcast, we hosted a conversation between ChatGPT and ChatGPT on how lawyers are using ChatGPT, as well as its risks and benefits to the legal industry. The webcast included: (1) a demonstration of ChatGPT’s ability to draft legal document; (2) the use of other AI tools to turn ChatGPT’s text into audio and video; (3) an explanation of how ChatGPT works, what it is good at, and which tasks are beyond its current capabilities; (4) how ChatGPT thinks it will change the legal profession; and (5) considerations for drafting a company policy on the use of ChatGPT for work.

***

To subscribe to the Data Blog, please click here.

Author

Charu A. Chandrasekhar is a litigation partner based in the New York office and a member of the firm’s White Collar & Regulatory Defense and Data Strategy & Security Groups. Her practice focuses on securities enforcement and government investigations defense and cybersecurity regulatory counseling and defense.

Author

Luke Dembosky is a Debevoise litigation partner based in the firm’s Washington, D.C. office. He is Co-Chair of the firm’s Data Strategy & Security practice and a member of the White Collar & Regulatory Defense Group. His practice focuses on cybersecurity incident preparation and response, internal investigations, civil litigation and regulatory defense, as well as national security issues. He can be reached at ldembosky@debevoise.com.

Author

Avi Gesser is Co-Chair of the Debevoise Data Strategy & Security Group. His practice focuses on advising major companies on a wide range of cybersecurity, privacy and artificial intelligence matters. He can be reached at agesser@debevoise.com.

Author

Erez is a litigation partner and a member of the Debevoise Data Strategy & Security Group. His practice focuses on advising major businesses on a wide range of complex, high-impact cyber-incident response matters and on data-related regulatory requirements. Erez can be reached at eliebermann@debevoise.com

Author

Kristin Snyder is a litigation partner and member of the firm’s White Collar & Regulatory Defense Group. Her practice focuses on securities-related regulatory and enforcement matters, particularly for private investment firms and other asset managers.

Author

Matthew Kelly is a litigation counsel based in the firm’s New York office and a member of the Data Strategy & Security Group. His practice focuses on advising the firm’s growing number of clients on matters related to AI governance, compliance and risk management, and on data privacy. He can be reached at makelly@debevoise.com

Author

Robert Maddox is International Counsel and a member of Debevoise & Plimpton LLP’s Data Strategy & Security practice and White Collar & Regulatory Defense Group in London. His work focuses on cybersecurity incident preparation and response, data protection and strategy, internal investigations, compliance reviews, and regulatory defense. In 2021, Robert was named to Global Data Review’s “40 Under 40”. He is described as “a rising star” in cyber law by The Legal 500 US (2022). He can be reached at rmaddox@debevoise.com.

Author

Johanna Skrzypczyk (pronounced “Scrip-zik”) is a counsel in the Data Strategy and Security practice of Debevoise & Plimpton LLP. Her practice focuses on advising AI matters and privacy-oriented work, particularly related to the California Consumer Privacy Act. She can be reached at jnskrzypczyk@debevoise.com.

Author

Michelle Huang is an associate in the Litigation Department.

Author

Stephanie D. Thomas is an associate in the Litigation Department and a member of the firm’s Data Strategy & Security Group and the White Collar & Regulatory Defense Group. She can be reached at sdthomas@debevoise.com.