Luke Dembosky – Debevoise Data Blog

Announcement

Debevoise Data Blog: Top 5 Privacy Posts of 2025

By: Charu A. Chandrasekhar, Luke Dembosky, Avi Gesser, Erez Liebermann, Robert Maddox, Julie M. Riewe, Kristin Snyder, Rick Sofield, Sheena Paul, Johanna Skrzypczyk, HJ Brehmer, Martha Hirst, Suchita Mandavilli Brundage, Melyssa Eigen, Ned Terrace, Michelle Shen, Diane Bernabei and Mengyi Xu December 11, 2025

As we approach the end of the year, here are the top 5 privacy posts on the Debevoise Data Blog in 2025. Takeaways for Large Firms from the SEC’s Reg…

Announcement

Debevoise Data Blog: Top 5 Cybersecurity Blog Posts of 2025

By: Andrew J. Ceresney, Charu A. Chandrasekhar, Luke Dembosky, Avi Gesser, Daniel M. Gitner, Erez Liebermann, Jim Pastore, Benjamin R. Pedersen, Jeff Robins, Julie M. Riewe, Kristin Snyder, Matt Kelly, HJ Brehmer, John Jacob, Gabriel Kohan, Amer Mneimneh, Andreas Constantine Pavlou, Lily Schoen, Cameron Sharp, Stephanie Thomas and Cindy Tu December 10, 2025

As we approach the end of the year, here are the Top 5 Cybersecurity posts on the Debevoise Data Blog in 2025. 1. Protecting Privilege in Incident Response: Litigation Lessons…

Cybersecurity

Protecting Privilege in Incident Response: Litigation Lessons

By: Luke Dembosky, Daniel M. Gitner, Erez Liebermann, Jim Pastore, HJ Brehmer, Gabriel Kohan and Amer Mneimneh September 15, 2025

Overview Companies responding to data breaches are faced with the question of whether their incident response investigation is protected by attorney-client privilege or attorney work-product doctrine. The issue primarily relates…

Artificial Intelligence

Trump Executive Order Puts the Spotlight on Foreign Cyber Threats, Managing AI Vulnerabilities, and Secure Software Development

By: Luke Dembosky, Erez Liebermann and Lily Schoen June 16, 2025

President Trump issued an Executive Order on June 6, 2025, that sheds light on the Administration’s approach to cybersecurity and AI by highlighting foreign threats to U.S. cybersecurity, emphasizing federal…

Announcement

Debevoise Attorneys Recognized in The Legal 500 for Cyber Law

By: Luke Dembosky, Avi Gesser, Erez Liebermann, Jim Pastore and Matt Kelly June 16, 2025

Luke Dembosky, Avi Gesser, Erez Liebermann, Jim Pastore, and Matt Kelly were all recognized by The Legal 500 USA in the category Cyber Law (Including Data Privacy and Data Protection) with Luke Dembosky…

Announcement

Debevoise’s Data Strategy & Security Group Recognized in Chambers Rankings for Both Artificial Intelligence and Privacy & Data Security

By: Luke Dembosky, Avi Gesser, Erez Liebermann, Jim Pastore, Charu A. Chandrasekhar and Matt Kelly June 5, 2025

We’re proud to share that Debevoise & Plimpton’s Data Strategy & Security group has been recognized as one of the few elite law firms ranked by Chambers for both Artificial…

Cybersecurity

Maturing Compliance with the Bulk Sensitive Data Rule (Data Security Program) before the July 8, 2025 Safe Harbor Expires

By: Luke Dembosky, Avi Gesser, Erez Liebermann, Rick Sofield, Johanna Skrzypczyk and Mengyi Xu May 28, 2025

All eyes are on the DOJ Bulk Sensitive Data Rule (28 C.F.R. Part 202), and July 8, 2025, when the recently announced good-faith safe harbor expires. The rule, which the…

Announcement

Debevoise Partners Named to Cybersecurity Docket’s 2025 “Incident Response 50” List

By: Luke Dembosky, Erez Liebermann and Jim Pastore April 24, 2025

Debevoise & Plimpton LLP partners Luke Dembosky, Erez Liebermann and Jim Pastore have again been named to Cybersecurity Docket’s “Incident Response 50 List” for 2025. The list recognizes the “50…

Artificial Intelligence

SEC’s Focus on Cyber and AI to Continue Under Trump Administration

By: Andrew J. Ceresney, Charu A. Chandrasekhar, Luke Dembosky, Avi Gesser, Erez Liebermann, Jeff Robins, Julie M. Riewe, Kristin Snyder and Cameron Sharp February 21, 2025

On February 20, 2025, the SEC announced the creation of the Cyber and Emerging Technologies Unit (“CETU”) to focus on “combatting cyber-related misconduct and to protect retail investors from bad…

Data Transfers

National Security Update: DOJ Unveils Rules Restricting Sensitive Bulk Data Transfers

By: Carter Burwell, Luke Dembosky, Rick Sofield, Robert Dura, Johanna Skrzypczyk and Emily Kennedy January 16, 2025

DOJ Issues Landmark Rules on Sensitive Data On December 27, 2024, the U.S. Department of Justice (“DOJ”) issued the “Final Rule on Preventing Access to Sensitive Data,” creating a comprehensive…