Annabella M. Waszkiewicz – Debevoise Data Blog

Artificial Intelligence

Top 10 (Well, 11) Cybersecurity Blog Posts for 2024

By: Charu A. Chandrasekhar, Luke Dembosky, Avi Gesser, Gareth Hughes, Erez Liebermann, Jim Pastore, Caroline Novogrod Swett, Marshal Bozzo, Matt Kelly, Robert Maddox, Johanna Skrzypczyk, HJ Brehmer, Stephanie Cipolla, Jackie Dorward, Melyssa Eigen, Joshua A. Goland, Martha Hirst, Karen Joo, Gabriel Kohan, Jarrett Lewis, Noah L. Schwartz, Ned Terrace, Stephanie Thomas, Annabella M. Waszkiewicz, Michiko Wongso and Mengyi Xu December 10, 2024

As we approach the end of the year, here are the Top 10 Cybersecurity posts on the Debevoise Data Blog in 2024 by page views. If you are not already…

Artificial Intelligence

Financial Services Industry Comments on CISA’s Proposed Reporting Obligations for Critical Infrastructure

By: Erez Liebermann, Gabriel Kohan, HJ Brehmer, Stephanie Thomas, Jarrett Lewis, Melyssa Eigen, Joshua A. Goland and Annabella M. Waszkiewicz July 10, 2024

Debevoise’s Data Strategy and Security group recently assisted four leading trade associations that represent the financial services industry in preparing a joint comment letter in response to the Cybersecurity and…

Artificial Intelligence

Recently Enacted AI Law in Colorado: Yet Another Reason to Implement an AI Governance Program

By: Avi Gesser, Erez Liebermann, Matt Kelly, Martha Hirst, Andreas Constantine Pavlou, Cameron Sharp and Annabella M. Waszkiewicz June 11, 2024

On May 17, 2024, Colorado passed Senate Bill 24-205 (“the Colorado AI Law” or “the Law”), a broad law regulating so-called high-risk AI systems that becomes effective on February 1,…

Consent

Federal Trade Commission Finalizes Updates to the Health Breach Notification Rule

By: Andrew L. Bab, Avi Gesser, Paul D. Rubin, Kim Le, Melissa Runsten, Johanna Skrzypczyk, Michael L. Cederblom, Hannah R. Levine, Kaitlyn McGill and Annabella M. Waszkiewicz May 20, 2024

On April 26, 2024, the Federal Trade Commission (the “FTC”) issued a controversial final rule (the “Final Rule”) that, among other things, expands the scope of the Health Breach Notification…

Cybersecurity

EU Digital Operational Resilience Act (“DORA”): Incident and Cyber Threat Reporting and Considerations for Incident Response Plans

By: Robert Maddox, Stephanie Thomas, Annabella M. Waszkiewicz and Michiko Wongso May 13, 2024

With the EU Digital Operational Resilience Act (“DORA”) implementation deadline set for January 2025, many financial services firms are spending 2024 preparing for the new regime. Amongst many operational resilience…

Artificial Intelligence

Treasury’s Report on AI (Part 1) – Governance and Risk Management

By: Charu A. Chandrasekhar, Avi Gesser, Erez Liebermann, Matt Kelly, Johanna Skrzypczyk, Michelle Huang, Sharon Shaji and Annabella M. Waszkiewicz April 29, 2024

On March 27, 2024, the U.S. Department of Treasury (“Treasury”) released a report on Managing Artificial Intelligence-Specific Cybersecurity Risks in the Financial Services Sector (the “Report”). The Report was released…

CISA

CISA Proposes Major Reporting Obligations for Critical Infrastructure

By: Avi Gesser, Luke Dembosky, Jim Pastore, Erez Liebermann, Caroline Novogrod Swett, HJ Brehmer, Gabriel Kohan, Michael R. Roberts, Stephanie Thomas and Annabella M. Waszkiewicz April 8, 2024

Adding to the growing number of cybersecurity incident reporting obligations, the Cybersecurity and Infrastructure Security Agency (“CISA”) has introduced a reporting requirement that will impact all critical infrastructure sectors, featuring…

Cybersecurity

NIST Releases Most Significant Update to Cybersecurity Framework Since 2014

By: Avi Gesser, Erez Liebermann, Michael R. Roberts, HJ Brehmer and Annabella M. Waszkiewicz March 14, 2024

On February 26, 2024, the National Institute of Standards and Technology (“NIST”) announced the release of Version 2.0 of the Cybersecurity Framework (“Version 2.0” or the “Framework”). We previously wrote…