On December 5, 2019, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) issued sanctions against Evil Corp, a Russian cybercriminal organization that is known for distributing the Dridex malware. Dridex is a banking trojan that has been used to target financial institutions across the globe and has resulted in more than $100 million […]
Critical Audit Matters Disclosure Implicates Information Technology and Security
As independent auditors to public companies and business development companies begin to make required disclosure of Critical Audit Matters (CAMs) to the audit committee, such reports are beginning to include discussion of information security programs and information technology controls. Independent auditors have treated material weaknesses in certain information technology controls as material weaknesses in internal […]
SHIELD Act Overhauls New York’s Data Breach Notification Framework
On October 23, 2019, New York’s new breach notification provisions came into effect, a result of New York’s passage of the Stop Hacks and Improve Electronic Data Security Act (SHIELD Act) in July. That Act overhauled New York’s data privacy framework, expanding the list of data elements that are considered “private information” while growing the […]
California Releases Proposed CCPA Regulations
California Attorney General Xavier Becerra released today a Notice of Proposed Rulemaking Action and Proposed Regulations for the California Consumer Privacy Act. The Attorney General will hold four public hearings to address these regulations on December 2, 3, 4, and 5, 2019. The written comment period will then end on December 6, 2019. These regulations […]
Senior Privacy, Cybersecurity Partner Wim Nauwelaerts Joins Alston & Bird
Alston & Bird has strengthened its global platform for advising on EU and international data protection with the addition of senior privacy and cybersecurity attorney Wim Nauwelaerts as partner in the firm’s Brussels office. Arriving from Sidley Austin LLP, Nauwelaerts is a veteran privacy and cybersecurity attorney with more than 20 years’ experience. Nauwelaerts advises […]