Cybersecurity News

Cybersecurity News

• Wave Goodbye to the Waiver Debate: Court Holds Data Breach Investigation Report Not Work Product from the Start May 17, 2025
  Litigants in data breach class actions often fight over whether a data breach investigation report prepared in response to the breach is protected by the work-product doctrine. Common areas of dispute include whether the report was prepared in whole or in part for business—not legal—purposes, and whether the report relays facts that are not discernable […]
  Alston & Bird
• 847 Awaiting Takeoff: DCSA Issues Guidance on Expanded Scope of FOCI Assessments May 17, 2025
  Section 847, which will expand foreign ownership, control or influence requirements to non-classified contracts, is on track for implementation in 2026. Section 847 of the National Defense Authorization Act for FY 2020 directs the Department of Defense (DoD) to move forward with proposing a new Defense Federal Acquisition Regulation Supplement (DFARS) rule that would expand […]
  Pillsbury Winthrop Shaw Pittman LLP
• The Digital Download – Alston & Bird’s Privacy & Data Security Newsletter – May 2025 May 17, 2025
  Selected U.S. Privacy & Cyber Updates - DOJ Settles False Claims Act Case with MORSECORP over Cybersecurity Program - On March 26, 2025, the U.S. Department of Justice (DOJ) announced that it had reached an agreement with MORSECORP Inc. to settle alleged violations of the False Claims Act, specifically involving MORSE’s cybersecurity program.
  Alston & Bird
• Employees Hiding Use of AI Tools at Work May 17, 2025
  A new study by Ivanti illustrates that one out of three workers secretly use artificial intelligence (AI) tools in the workplace. They do so for varying reasons, including “I like a secret advantage,” “My job might be reduced/cut,” “My employer has no AI usage policy,” “My boss might give me more work,” “I don’t want […]
  Robinson+Cole Data Privacy + Security Insider
• California Privacy Protection Agency Releases Updated Regulations: What’s Next? May 17, 2025
  This month, the California Privacy Protection Agency (CPPA) Board discussed updates to the California Consumer Privacy Act (CCPA) draft regulations related to cybersecurity audits, risk assessments, automatic decision-making technology (ADMT), and insurance.
  Robinson+Cole Data Privacy + Security Insider
• The Importance of Culture in an Effective Cybersecurity Program May 16, 2025
  While technology plays a pivotal role in cybersecurity, the human element is equally crucial. An organization's culture can significantly influence the effectiveness of its cybersecurity measures. A strong cybersecurity culture fosters an environment where security is prioritized, and all employees understand their role in protecting the organization’s assets.
  Ankura
• As the (Customs and Trade) World Turns: May 2025 May 16, 2025
  Welcome to the May 2025 issue of “As the (Customs and Trade) World Turns,” our monthly newsletter where we compile essential updates from the customs and trade world over the past month. We bring you the most recent and significant insights in an accessible format, concluding with our main takeaways — aka “And the Fox […]
  ArentFox Schiff
• EU Cyber Resilience Act: How to Prepare Now May 16, 2025
  The EU Cyber Resilience Act (CRA), adopted by the European Parliament in 2024, marks a major milestone in European cybersecurity legislation. As the first EU-wide law focused on the cybersecurity of digital products, it establishes mandatory requirements for manufacturers, importers, and distributors of Products with Digital Elements (PDEs). Its primary goal is to minimize vulnerabilities […]
  Mitratech Holdings, Inc
• Virginia Will Add to Patchwork of Laws Governing Social Media and Children (For Now?)  May 16, 2025
  Virginia’s governor recently signed into law a bill that amends the Virginia Consumer Data Protection Act. As revised, the law will include specific provisions impacting children’s use of social media. Unless contested, the changes will take effect January 1, 2026. Courts have struck down similar laws in other states (see our posts about those in […]
  Sheppard Mullin Richter & Hampton LLP
• The Academic Advisor - Education Law Insights, Issue 4, May 2025 May 16, 2025
  Welcome to our fourth issue of The Academic Advisor for 2025. In this edition, we cover the following topics of interest for schools, institutions of higher education, and other education-focused organizations: - How a settlement victory for Maine affects Title IX and state law protections on the basis of gender identity; - The restart of […]
  Spilman Thomas & Battle, PLLC