Enforcement – Debevoise Data Blog

Artificial Intelligence

Cyber Whistleblower Leads to DOJ Civil Settlement

By: Avi Gesser, Luke Dembosky, Andrew M. Levine, Erez Liebermann, Jim Pastore, Stephanie Cipolla and Michelle Shen November 4, 2024

On October 22, 2024, the U.S. Department of Justice (“DOJ”) announced that The Pennsylvania State University (“Penn State”), a public university in University Park, Pennsylvania, agreed to pay $1.25 million…

Enforcement

SEC Charges Four Companies for Misleading Cyber Disclosures

By: Andrew J. Ceresney, Charu A. Chandrasekhar, Luke Dembosky, Erez Liebermann, Benjamin R. Pedersen, Julie M. Riewe, Matt Kelly, Anna Moody, Kelly Donoghue, Ciera Mandelsberg and Noah L. Schwartz October 28, 2024

On October 22, 2024, the U.S. Securities and Exchange Commission (the “SEC”) announced settled charges in separate actions against four technology companies—Avaya Holdings Corp. (“Avaya”), Check Point Software Technologies Ltd.…

Cybersecurity

ICO Dawn Raids: How to respond and what you can do to prepare – An FAQ

By: Robert Maddox and Aisling Cowell September 25, 2024

In the UK, unannounced inspections of businesses’ premises, or “dawn raids”, are most often associated with authorities such as the Serious Fraud Office, National Crime Agency, Competition and Markets Authority…

Artificial Intelligence

European Data Protection Roundup – August 2024

By: Robert Maddox, Friedrich Popp, Aisling Cowell, Deniz Tanyolac, Oliver Binns, Anna Chirniciuc, Olivia Halderthay and Samuel Thomson September 23, 2024

Our top-five European data protection developments from August are: Uber fined for personal data transfer: The Dutch Data Protection Authority fined Uber €290 million for the unlawful transfer of European…

Artificial Intelligence

European Data Protection Roundup – July 2024

By: Robert Maddox, Friedrich Popp, Stephanie Thomas, Joshua Plastrik, Theo Wilson, Barney Lynock and Deniz Tanyolac August 27, 2024

Our top five European data protection developments from July are: EU AI guidance: Businesses should consider reviewing their AI policies and practices following guidance from the French CNIL and the…

Cybersecurity

Internal Accounting Controls Claim Rejected in SolarWinds Case

By: Andrew J. Ceresney, Charu A. Chandrasekhar, Luke Dembosky, Erez Liebermann, Benjamin R. Pedersen, Julie M. Riewe, Paul Rodel, Matt Kelly, Anna Moody, Alice Gu and Talia Lorch July 23, 2024

On July 18, 2024, in the landmark SEC v. SolarWinds Corp. case, U.S. District Judge Paul Engelmayer dismissed the majority of the claims brought by the U.S. Securities and Exchange Commission (the…

Artificial Intelligence

Navigating Antitrust in the Age of AI: Global Regulatory Scrutiny and Implications

By: Tim Cornell, Timothy McIver, Michael Schaper, Kyra K. Bromley, Anne-Mette Heemsoth, Adam C. Saunders, Zesemaiat Debessai Corino and Alfred Scott June 20, 2024

Companies across a range of industries are increasingly incorporating artificial intelligence (“AI”) into their businesses. As with any new technology, AI presents a number of questions concerning its relation to…

Cybersecurity

Incident Response Plans Are Now Accounting Controls? SEC Brings First-Ever Settled Cybersecurity Internal Controls Charges

By: Andrew J. Ceresney, Charu A. Chandrasekhar, Luke Dembosky, Avi Gesser, Erez Liebermann, Benjamin R. Pedersen, Julie M. Riewe, Matt Kelly, Anna Moody and Andreas A. Glimenakis June 20, 2024

In an unprecedented settlement, on June 18, 2024, the U.S. Securities & Exchange Commission (the “SEC”) announced that communications and marketing provider R.R. Donnelley & Sons Co. (“RRD”) agreed to…

Artificial Intelligence

European Data Protection Roundup – April 2024

By: Robert Maddox, Friedrich Popp, Fanny Gauthier, Stephanie Thomas, Michiko Wongso, Oliver Binns, Anna Chirniciuc, Barney Lynock, Alfred Scott and Deniz Tanyolac May 28, 2024

Key takeaways from April include: UK FCA’s AI regulation: UK FCA-regulated firms should take note of the FCA’s newly confirmed approach to AI regulation that seeks to be outcome-focused, principle-led,…