Erez Liebermann – Page 10 – Debevoise Data Blog

Announcement

Debevoise Authors 2023 Edition of the PLI Privacy Law Answer Book

By: Luke Dembosky, Avi Gesser, Jyotin Hamid, Satish Kini, Henry Lebowitz, Erez Liebermann, Maura Kathleen Monaghan, David A. O'Neil, Jim Pastore, David Sarratt, Jeffrey P. Cunard, Kim Le, Tricia Bozyk Sherno, Johanna Skrzypczyk, Michael R. Roberts, Michael Bloom, Fanny Gauthier, Corey Goldstein, Kyle Kysela, Hannah R. Levine, Linda Lin, Melissa Muse, Kate Saba, Noah L. Schwartz and Mengyi Xu January 23, 2023

The Data Strategy and Security team at Debevoise & Plimpton LLP has authored the Practising Law Institute’s 2023 edition of the Privacy Law Answer Book, a user-friendly guide to the laws and…

Cybersecurity

Report Underscores FINRA’s Focus on Cybersecurity

By: Avi Gesser, Erez Liebermann, Kristin Snyder, Charu A. Chandrasekhar and Michael R. Roberts January 18, 2023

On January 10, 2023, the Financial Industry Regulatory Authority (“FINRA”) published its 2023 Report on FINRA’s Examination and Risk Monitoring Program (the “Report”), which is intended to provide member firms…

SEC

Recent SEC EXAMS Risk Alert Highlights Key Considerations for Reg S-ID Compliance

By: Avi Gesser, Erez Liebermann, Kristin Snyder, Charu A. Chandrasekhar, Michael R. Roberts and Noah L. Schwartz December 14, 2022

On December 5, 2022, the Securities and Exchange Commission (the “SEC”) Division of Examinations (“EXAMS”) published a Risk Alert providing observations from recent examinations relating to investment adviser and broker-dealers’…

NYDFS

NYDFS Publishes Official Amendments to Its Cybersecurity Regulation (Part 2) – Answers to the Top Questions from Our Webcast

By: Avi Gesser, Erez Liebermann, Johanna Skrzypczyk, Caroline Novogrod Swett, Mengyi Xu and Jonathan Steinberg November 30, 2022

On November 9, 2022, the New York Department of Financial Services (the “NYDFS”) announced the publication of the official proposed amendments to its 2017 Cybersecurity Regulation 23 NYCRR 500 (the “Proposed Amendments”). The 60-day…

Announcement

Webcast: NYDFS New Draft Amendments to Part 500 Cybersecurity Rules

By: Eric Dinallo, Avi Gesser, Erez Liebermann, Caroline Novogrod Swett and Johanna Skrzypczyk November 15, 2022

On Friday, November 18, 2022 at 10:30AM ET, Eric Dinallo, Avi Gesser, Erez Liebermann, Caroline Novogrod Swett, and Johanna Skrzypczyk participated in a webcast examining the new draft amendments to…

Cybersecurity

NYDFS Publishes Official Amendments to Its Cybersecurity Regulation

By: Luke Dembosky, Avi Gesser, Erez Liebermann, Caroline Novogrod Swett, Johanna Skrzypczyk and Mengyi Xu November 10, 2022

On November 9, 2022, the New York Department of Financial Services (“NYDFS”) announced the publication of the official proposed amendments to its 2017 Cybersecurity Regulation 23 NYCRR 500 (“Proposed Amendments”).…

Enforcement

European Data Protection Roundup – October

By: Erez Liebermann, Robert Maddox, Friedrich Popp, Fanny Gauthier, Stephanie Thomas, Tristan Lockwood and Melissa Muse November 2, 2022

Key takeaways this October include: Facial Recognition: Businesses face continued challenges in establishing GDPR-compliant facial recognition technology, including those with no presence in the EEA, after the French CNIL fined…

Cybersecurity

GDPR Technical and Organisational Measures: Lessons from the UK ICO’s £4.4m Data Breach Penalty

By: Erez Liebermann, Robert Maddox, Stephanie Thomas and Tristan Lockwood October 27, 2022

On 24 October 2022, the UK Information Commissioner’s Office (“ICO”) fined Interserve Group Limited £4.4 million for failing to implement appropriate technical and organisational measures to safeguard 113,000 individuals’ personal…

Enforcement

European Data Protection Roundup – September

By: Luke Dembosky, Avi Gesser, Erez Liebermann, Robert Maddox, Friedrich Popp, Fanny Gauthier, Stephanie Thomas, Tristan Lockwood and Melissa Muse October 10, 2022

European Data Protection Roundup – September 2022 Key takeaways this September include: Google Analytics: Continue to assess carefully the use of Google Analytics. The Danish Data Protection Agency became the…

Enforcement

Lessons from the SEC’s Most Recent Reg S-P Action

By: Avi Gesser, Kristin Snyder, Erez Liebermann, Charu A. Chandrasekhar, Johanna Skrzypczyk and Scott M. Caravello October 6, 2022

On September 20, 2022, the SEC announced settled charges and the imposition of a $35 million penalty against a dually registered investment adviser and broker-dealer (the “Firm”) for violations of Regulation…