Risk assessments are a critical component of a robust cybersecurity program. To benchmark their risk assessments and cybersecurity maturity reviews, companies often look to recognized industry standards such as the National Institute of Standards and Technology Cybersecurity Framework (“NIST CSF” or “the Framework”). In this Debevoise Data Blog post, we discuss proposed changes to the Framework and offer takeaways for…

On Tuesday, February 21st, Avi Gesser, Sam Allaman and Melissa Muse from our Data Strategy and Security Group hosted for a conversation between ChatGPT and ChatGPT on how lawyers are using ChatGPT, as well as its risks and benefits to the legal industry. The webcast included: A demonstration of ChatGPT’s ability to draft legal documents. The use of other AI…

Key takeaways from December and January include: Cookies: Businesses should consider reviewing their cookie compliance following major CNIL fines against Microsoft (€60 million) and TikTok (€5 million) calling for companies to ensure user consent is paramount and that refusing cookies is as easy as accepting them; More on cookies: Websites are advised to implement user-friendly cookie consent mechanisms such as…