Cybersecurity News
- Canvas Cybersecurity Incident: Key Facts, Risks, and Immediate Considerations for Affected Organizations May 15, 2026Education institutions using the Canvas learning management system (LMS), operated by Instructure, may be impacted by a recently disclosed cybersecurity incident involving unauthorized access to customer-associated data. The incident remains under active investigation, but available information provides important guidance regarding risk exposure, regulatory obligations, and recommended response measures.Baker Donelson
- AI Act Update: EU Resolves to Change Rules and Extend Deadlines May 14, 2026EU lawmakers have agreed to reduce overlap of rules, introduce new prohibitions, and extend deadlines for high-risk AI systems.Latham & Watkins LLP
- Privacy and Cybersecurity Client Alert | May 2026 | Colorado Hits Reset on AI Regulation May 14, 2026A new law will replace the Colorado AI Act’s demanding governance mandates with a narrower, more business-friendly regime focused on consumer notice, human review, and clearer liability boundaries.Shook, Hardy & Bacon L.L.P.
- A First Among OCR Enforcements: Publicly Traded Energy Co. Pays $245K After Employer Plan’s Breach May 14, 2026For most of its HIPAA enforcement history, the HHS Office for Civil Rights (OCR) has engaged in a remarkably similar pattern with (allegedly) noncompliant healthcare organizations:Health Care Compliance Association (HCCA)
- Colorado Repeals and Replaces AI Act May 14, 2026On May 9, 2026, the Colorado General Assembly passed Senate Bill 26-189 (the "Bill"), which repeals and reenacts the previously passes SB 24-25 (Colorado's “AI Act") with comprehensive new requirements governing the use of automated decision-making technology ("ADMT") in consequential decisions affecting consumers.Baker Botts L.L.P.
- Israeli Companies Entering the U.S. Government Contracts Market: What You Need to Know May 14, 2026For Israeli companies looking to expand into the United States, the federal government contracting market represents one of the most attractive growth opportunities in the world.Bradley Arant Boult Cummings LLP
- Key Takeaways from the 2026 MBA Legal Issues and Regulatory Compliance Conference May 14, 2026A group of our Hinshaw colleagues had a front-row seat as the Diamond Sponsor firm at last week’s Mortgage Bankers Association Legal Issues and Regulatory Compliance Conference in Miami from May 4–7, 2026. Several of our team members presented on panels throughout the conference.Hinshaw & Culbertson - Consumer Crossroads
- The BR International Trade Report: May 2026 May 14, 2026Welcome to this month’s issue of The BR International Trade Report, Blank Rome’s monthly digital newsletter highlighting international trade, cross-border investment, and geopolitical risk issues impacting businesses domestically and abroad.Blank Rome LLP
- Senate Banking Set to Mark Up the CLARITY Act: What to Watch in Tomorrow’s Hearing May 14, 2026On Thursday, May 14, at 10:30 a.m., the Senate Banking, Housing, and Urban Affairs Committee will meet in executive session to mark up H.R. 3633, the Digital Asset Market Clarity Act of 2025 (the CLARITY Act). The session is a key procedural step for this comprehensive digital asset market structure legislation that, if enacted, would […]Troutman Pepper Locke
- Colorado Rewrites Its AI Law May 14, 2026On May 12, the Colorado legislature passed Senate Bill 26‑189, a substantial rewrite of its 2024 law establishing consumer protections for artificial intelligence (formerly referred to as the CO AI Act), and replaced it with a more targeted framework for “automated decision‑making technology” (ADMT). The changes will take effect on January 1, 2027.Troutman Pepper Locke
CMMC News
- Israeli Companies Entering the U.S. Government Contracts Market: What You Need to Know May 14, 2026For Israeli companies looking to expand into the United States, the federal government contracting market represents one of the most attractive growth opportunities in the world.Bradley Arant Boult Cummings LLP
- What Business Leaders Need to Know About Cybersecurity Certification and Enforcement in 2025–2026 - May 11, 2026The Department of Defense has fundamentally reshaped the cybersecurity landscape for federal contractors. With the Cybersecurity Maturity Model Certification (CMMC) program now embedded in contract clauses effective November 10, 2025, and False Claims Act enforcement tripling in a single fiscal year, cybersecurity is no longer a technical concern delegated to IT departments. It is a […]Shumaker, Loop & Kendrick, LLP
- The Korea Defense Market Is Open – Here’s What U.S. Companies Need to Know Before They Walk In May 8, 2026South Korea has become one of the fastest-growing defense markets on the planet. Korea’s defense exports reached $15.4 billion in 2025, surging 60% year-on-year, driven largely by major contracts with Poland and other NATO-aligned buyers.Bradley Arant Boult Cummings LLP
- The Ultimate Guide to Managing Third-Party Risk May 8, 2026The threat landscape is compounding the pressure: software supply chain compromises, AI tool proliferation, and concentration risk across technology providers and supplier ecosystems are routine exposures now, not edge cases. What’s changing is how organizations are responding. The programs gaining ground are integrating TPRM into the broader risk and compliance function, using vendor intelligence to […]Mitratech Holdings, Inc
- Weekly Update for Government Contractors and Commercial Businesses – May 2026 May 7, 2026Executive Order (EO): Promoting Efficiency, Accountability, and Performance in Federal Contracting On April 30, the President issued an EO establishing the Administration’s policy that fixed-price contracts with performance-based considerations serve as the default and preferred method of procurement to advance cost predictability and budget discipline, appropriate contractor incentives and accountability, and streamlined procurement and contract […]PilieroMazza PLLC
- Korean Deep Tech Is Entering the U.S. Government Market — Here’s What the Legal Landscape Actually Looks Like May 5, 2026The timing has rarely been better for Korean companies to pursue U.S. government contracts. The White House and the Republic of Korea signed a Technology Prosperity Deal MOU in October 2025 covering AI, semiconductors, quantum computing, and space.Bradley Arant Boult Cummings LLP
- Artificial Intelligence in Defense Contracting: What Contractors Need to Know Now May 5, 2026AI is now embedded in core defense mission systems, acquisition planning, and contract administration. The legal, compliance, and contractual risks that follow are fast-growing and consequential — capable of derailing performance, generating False Claims Act (FCA) exposure, or disqualifying proposals.Bradley Arant Boult Cummings LLP
- Weekly Update for Government Contractors and Commercial Businesses – April 2026 #5 April 30, 2026Federal Acquisition Regulation (FAR) Overhaul Class Deviations - On April 20, class deviations for FAR Parts 9 (Contractor Qualifications), 12 (Acquisition of Commercial Products and Commercial Services), 22 (Application of Labor Laws to Government Acquisitions), and 52 (Solicitation Provisions and Contract Clauses) were updated based on the Trump Administration’s Executive Order banning diversity, equity, and […]PilieroMazza PLLC
- Vendor Risk Assessment: The Definitive Guide April 29, 2026Vendor risk assessments are a critical component of third-party risk management programs. When you use third-party solutions and services, you should understand the risks they can bring.Mitratech Holdings, Inc
- Innovation in Compliance: Beating Compliance Drift: Why Regulatory Intelligence and Continuous Monitoring Matter with Jeff Kushner April 28, 2026Innovation occurs across many areas, and compliance professionals need not only to be ready for it but also to embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and creators in the award-winning Innovation in Compliance podcast. In this episode, host Tom visits with Jeff Kushner, a […]Thomas Fox - Compliance Evangelist