News & Analysis as of July 24, 2025

Cybersecurity › Reporting Requirements

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

China Initiates Mandatory Reporting Regime for Personal Information Protection Officers

Sheppard Mullin Richter & Hampton LLP on 7/23/2025

On July 18, 2025, the Cyberspace Administration of China (the “CAC”) issued the Notice on Launching the Reporting Mechanism for Personal Information Protection Officers (the “Notice ”). This development marks a significant...more

Here We Go Again - Risk Factors and Other Reminders for Upcoming Quarterly Reports

BCLP on 7/23/2025

In April, companies were faced with addressing the impacts of tariffs and a global trade war, as discussed in our April 8, 2025 post. Companies now find themselves grappling with the need to re-address these issues in light...more

UK Weekly Sanctions Update - Week of July 14, 2025

Mayer Brown on 7/21/2025

RUSSIA SANCTIONS - UK Lowers Oil Price Cap on Seaborn Russian Crude Oil, OFSI publishes related FAQs: On July 18, 2025, the UK Government, alongside the EU, announced that it will lower to Oil Price Cap on seaborne Russian...more

CHINA: DPOs Must Be Registered Before 29 August 2025

DLA Piper on 7/21/2025

While appointing and registering a DPO has been mandatory in China for many years, a portal has now finally been established for organisations to register those DPOs with the China data protection authority. This resolves...more

Have You Enrolled in EDGAR Next? Enrollment Deadline Approaching

ArentFox Schiff on 7/21/2025

In September 2024, the US Securities and Exchange Commission (SEC) adopted rule changes to its Electronic Data Gathering, Analysis, and Retrieval (EDGAR) file access and account management system (EDGAR Next), which went into...more

Missouri Adopts New Data Breach Notice Law for Insurers – The 10 Things Insurers and Licensed Entities Need to Know

Fisher Phillips on 7/18/2025

As cybersecurity threats escalate, state legislatures across the country are tightening requirements for how insurance entities respond to data breaches – and thanks to a new law just passed several weeks ago, Missouri is...more

Texas Cyber Command: New Authority for Statewide Cybersecurity Coordination

Pillsbury Winthrop Shaw Pittman LLP on 7/18/2025

While the Command’s authority applies only to governmental bodies, its creation signals a shift in how the state organizes its cybersecurity posture. This new law may have practical implications for vendors, contractors and...more

[Event] 8th National Forum on FOCI - September 29th - 30th, Washington, DC

American Conference Institute (ACI) on 7/16/2025

Section 847 is widely regarded as a seismic shift that will result in a jump from 2,000 to 41,000 cases being processed annually! In anticipation of this, DCSA has been scaling up their resources and personnel. ACI’s 8th...more

Increase In Fraudulent Business Filings

IR Global on 7/11/2025

How Can You Protect Yourself and Your Business? What Is A Fraudulent Business Filing? The phrase is relatively self-explanatory: any business filing obtained, changed, or filed without authorization and/or involving...more

The EU’s New Cybersecurity Law for the Space Sector

Skadden, Arps, Slate, Meagher & Flom LLP on 7/9/2025

On 25 June 2025, the European Commission announced its proposal for a “Space Act” that would introduce a new regulatory framework for EU space activities. The proposed framework includes cyber-resilience obligations for EU...more

NIS 2: Strengthening Europe’s Cyber Defenses

Morrison & Foerster LLP on 7/8/2025

European cybersecurity risk management and reporting obligations have received a substantial facelift. The Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the EU (“NIS 2”) became effective...more

HB1127 Explained: North Dakota’s New InfoSec Requirements for Financial Corporations

Jackson Lewis P.C. on 7/7/2025

Earlier this year, North Dakota’s Governor signed HB 1127, which introduces new compliance obligations for financial corporations operating in North Dakota. This new law will take effect on August 1, 2025....more

Watch Out for Hoax Reports to Your Hotline

NAVEX on 7/3/2025

We’ve recently been made aware of an increase in anonymous hoax emails and online reports posted to multiple companies through their internal reporting systems. The wording of these posts were identical and alleged violation...more

Cyber Resilience Is Key: The Never-Ending Delays of NIS2 Implementation

King & Spalding on 7/2/2025

The European Union’s ("EU") NIS2 Directive (Directive (EU) 2022/2555) capitalizes on the success of its predecessor, NIS, the first horizontal minimum harmonization cyber security and resilience frameworks at the EU level....more

EU Space Act: What In-House Counsel Need to Know About the Potential Regulatory Framework for Space Activities in Europe

King & Spalding on 7/2/2025

On June 25, 2025, the European Commission published the long-anticipated draft EU Space Act (“Act”), a potentially landmark regulation that will apply to both EU and non-EU operators providing space services in Europe. The...more

Navigating Evolving Cyber Regulations in the United States

Morgan Lewis - Tech & Sourcing on 7/1/2025

Cyber regulations are crucial for the protection of individuals and businesses and aid in risk minimization; failure to comply with these regulations can result in severe consequences such as financial penalties, legal...more

NYDFS Urges Covered Entities to Review Security Practices Amidst World Turmoil

Paul Hastings LLP on 6/27/2025

Citing “escalating global conflict,” the New York Department of Financial Services issued an alert on Monday, June 22, 2025, to its regulated covered entities, urging them to be vigilant against potential security threats,...more

UK Bill Would Increase Cybersecurity Standards for Critical Infrastructure Operators

Skadden, Arps, Slate, Meagher & Flom LLP on 6/26/2025

Recent months have seen a spate of high-profile cyber incidents that have affected UK companies and disrupted supply chains, keeping cybersecurity on the front pages and at the top of UK companies’ agendas. In response to the...more

Cybersecurity Compliance in the New Administration

Paul Hastings LLP on 6/26/2025

Last month, Paul Hastings sponsored the Cybersecurity Law Workshop at the Spring Privacy & Security Forum held at George Washington University in Washington, D.C. The Cybersecurity Law Workshop featured three panels of...more

4 Actions for Cos. as SEC Rebrands Cyber Enforcement Units

Troutman Pepper Locke on 6/23/2025

On Feb. 20, the U.S. Securities and Exchange Commission announced the creation of the Cyber and Emerging Technologies Unit, which will replace the Enforcement Division’s previous Crypto Assets and Cyber Unit. Originally...more

Right To Know - June 2025, Vol. 30

Clark Hill PLC on 6/19/2025

Cyber, Privacy, and Technology Report - Welcome to your monthly rundown of all things cyber, privacy, and technology, where we highlight all the happenings you may have missed. State Action: North Dakota Passes Law...more

North Dakota Passes New Data Security Law for “Financial Corporations”

Sheppard Mullin Richter & Hampton LLP on 6/17/2025

North Dakota recently passed a law establishing new rules for certain financial companies operating in the state – specifically “financial corporations.” The new obligations will take effect on August 1, 2025. They will apply...more

The Future of the SEC’s Cybersecurity Disclosure Rules

DLA Piper on 6/16/2025

Adopted in July 2023, the US Securities and Exchange Commission (SEC)’s cybersecurity disclosure rules require public companies to report material cybersecurity incidents on Form 8-K and to annually report on their...more

Pay the Price, Now ‘Fess Up’: Reporting Obligations for Ransomware Payments Are Live

K&L Gates LLP on 6/16/2025

As of 29 May 2025, the requirement on businesses to report ransomware payments they make has come into effect. What is the Requirement? If a reporting business entity becomes impacted by a cyber security incident and ends up...more

Australia mandates first-of-its-kind reporting of ransomware payments

Hogan Lovells on 6/16/2025

Australia has implemented a first-of-its kind requirement for eligible businesses to report ransomware payments. From 30 May 2025, eligible businesses that make a payment in response to a cyber security incident, or become...more

669 Results

/

View per page

Page: of 27

Next »