Search for:

Webcast – Artificial Intelligence Regulation in the Securities Industry – A Discussion with Haimera Workie of FINRA’s Office of Financial Innovation

By: and

On July 23, 2020, Anna Gressel and Avi Gesser from Debevoise’s Data Strategy and Security Group, along with their special guest, Haimera Workie, the Head of Financial Innovation and Senior Director of FINRA’s Office of Financial Innovation, had an insightful conversation about FINRA’s recent report on Artificial Intelligence in the Securities Industry, including: How AI and machine learning are currently…

First Enforcement Action by New York DFS Under Its Cyber Rules Shows Where Companies Face Regulatory Risk – Six Quick Takeaways

By: , , , , , , , and

The New York State Department of Financial Services (“DFS”) issued a Statement of Charges and Notice of Hearing (the “Charges”) earlier today against First American Title Insurance Company (“First American”) for multiple violations of the DFS Part 500 Cybersecurity Regulation (the “Regulation”), including: Failure to perform an adequate risk assessment Failure to maintain proper access controls Failure to provide adequate security…

Schrems II: Privacy Shield Invalid and Severe Challenges for Standard Contractual Clauses

By: , , , , , , , , , , and

Today the Court of Justice of the European Union (CJEU), the EU’s highest court, invalidated the EU-U.S. Privacy Shield for cross-border transfers of personal data.  The CJEU’s decision also cast significant doubts over whether companies can continue to use the European Commission-approved Standard Contractual Clauses (SCCs) to transfer EU personal data to the U.S., or to other jurisdictions with similarly…

GDPR Enforcement Keeps Getting Tougher: Google LLC Loses Appeal In France Against €50 Million Fine

By: , and

France’s supreme court for administrative matters, the Council of State (Conseil d’Etat), has upheld the €50 million fine imposed on Google LLC by the French data protection authority, the Commission Nationale Informatique et Libertés (the “CNIL”), for breaches of the General Data Protection Regulation (the “GDPR”). Google LLC is the California-based, Delaware-incorporated entity that serves as the main Google operating…

Webcast – Safeguarding Employees’ Credentials and Preventing Unauthorized Access to Sensitive Data Stored in the Cloud and on Employees’ Personal Devices

By: and

On July 7, 2020, Avi Gesser and Mengyi Xu from Debevoise’s Data Strategy & Security Group, along with their special guests, Luke Tenery and Joe Shepley of Ankura, had a insightful discussion on how companies can identify and reduce the risks associated with employee credential security, including: Making sure that furloughed and departing employees do not have access to confidential…