On May 1, 2023, bitFlyer USA, Inc. (“bitFlyer”) entered into a Consent Order with the New York Department of Financial Services (“DFS”) for multiple deficiencies in bitFlyer’s cybersecurity program, most notably for failure to conduct periodic risk … [Read more] about NYDFS Penalizes bitFlyer $1.2 Million for Violations to Cybersecurity Regulation
In August 2020, privacy activist organization NOYB - European Center for Digital Rights filed 101 complaints with the EU Supervisory Authorities (‘SAs’) in connection with the transfer of personal data from Europe to the U.S., by companies that had … [Read more] about International Data Transfers: Lessons from the EDPB’s “101 Task Force”
Background On April 4th, 2023, the European Data Protection Board (‘EDPB’), which is composed of representatives of the EU national supervisory authorities and the European Data Protection Supervisor (‘EDPS’), published an updated version of the … [Read more] about EU Supervisory Authorities Clarify Breach Notification Requirements
On February 24, 2023, the Cyberspace Administration of China (“CAC”) released its final version of the Standard Contract Measures for Exporting Personal Information (“Standard Contract Measures”), accompanied by a template contract outlining the … [Read more] about China’s Standard Contractual Clauses for Cross-Border Transfers of Personal Information
In recent weeks, FTC and HHS have announced expansion of the operational areas of their organizations that are dedicated to enforcement of laws and regulations related to technology, privacy, and cybersecurity. On February 17, 2023, the FTC … [Read more] about HHS and FTC Expanding Technology, Privacy, and Cybersecurity Divisions