News & Analysis as of

Financial Institutions Data Security

Orrick, Herrington & Sutcliffe LLP

CFPB proposes new rule to implement Section 1033 on consumer data rights

On August 22, the CFPB issued an advance notice of proposed rulemaking in the Federal Register seeking public comments and data to inform its decisions on implementing Section 1033 of the Dodd-Frank Act (the Personal...more

Ballard Spahr LLP

CFPB invites comments on new Section 1033 ‘open banking’ rule

Ballard Spahr LLP on

As promised, the CFPB is issuing an Advance Notice of Proposed Rulemaking soliciting comments on the agency’s open banking rule....more

Jackson Lewis P.C.

Case-by-Case Approach Helps Financial Services Successfully Navigate Disability-Related Remote Work Requests

Jackson Lewis P.C. on

In the post-pandemic workplace, employee requests to work from home have become increasingly common — especially as a form of reasonable accommodation under the Americans with Disabilities Act (ADA). For employers in the...more

Fox Rothschild LLP

FTC Issues GLBA Safeguard Rule FAQs: What Motor Vehicle Dealers Need to Know

Fox Rothschild LLP on

The FTC has issued FAQs for Gramm-Leach-Bliley Act (GLBA) Safeguards Rule compliance by Motor Vehicle Dealers. Here is what you need to know: Step 1: Are you a financial institution? • You are if you either finance (or...more

Fisher Phillips

GLBA Set for Overhaul? 10 Questions That May Decide the Next Generation of Financial Privacy Law

Fisher Phillips on

Congress is asking the financial industry – and anyone else with a stake in consumer data – to weigh in on the future of the Gramm-Leach-Bliley Act (GLBA). On July 31, the US House Financial Services Committee leaders issued...more

Hanzo

Audit Readiness in Financial Services: A Practical Guide for High-Stakes Compliance

Hanzo on

In the financial services industry, audit preparation has become a continuous discipline that requires rigorous data governance, operational foresight, and real-time adaptability. This is especially important as compliance...more

Ankura

Financial Services: Data Management Strategies for AI Readiness

Ankura on

58 In the complex and highly regulated financial services environment, the cost of poor data management is staggering, estimated to cost businesses billions annually in operational inefficiencies, regulatory fines, and missed...more

Lowenstein Sandler LLP

Compliance Deadlines to Implement Significant Amendments to Regulation S-P Are Fast Approaching: Key Implications for Covered...

On May 16, 2024, the Securities and Exchange Commission (SEC) adopted sweeping amendments to Regulation S-P, which governs the privacy of nonpublic consumer personal and financial information for a broad range of financial...more

Wyrick Robbins Yates & Ponton LLP

Not Just for Auto Dealers: What the FTC’s Updated Safeguards Rule Means for All Non-Bank Financial Institutions

Last month, the Federal Trade Commission issued guidance on the updated Safeguards Rule in the form of a set of Frequently Asked Questions for Automobile Dealers. Although directed to auto dealers, the FAQs are a useful...more

Cooley LLP

Rhode Island Enacts New Financial Institutions Cybersecurity Law With Immediate Effect

Cooley LLP on

As the Consumer Financial Protection Bureau (CFPB) and Federal Trade Commission (FTC) scale back rulemaking and enforcement, states are advancing more prescriptive cybersecurity standards for financial institutions, including...more

Hogan Lovells

ECB Guide on outsourcing cloud services to cloud service providers

Hogan Lovells on

The European Central Bank (ECB) has published its Guide on outsourcing cloud services to cloud service providers (the "Guide") clarifying how banks are expected to comply with obligations under the EU Digital Operational...more

Patomak Global Partners

American Bankers Association Conference Focused on AI

In June 2025, the ABA held its annual Risk and Compliance Conference. The conference heavily focused on how banks are leveraging AI to support front-, middle-, and back-office functions. Conference participants noted that...more

Miller Nash LLP

Swipe, Tap, Comply: What PCI DSS 4.0.1 Means for your Business

Miller Nash LLP on

With the seemingly never-ending updates to B2B contracts for compliance with new (and amended) comprehensive state privacy laws, the U.S. Department of Justice’s bulk data transfer rule, and artificial intelligence (AI)...more

Bradley Arant Boult Cummings LLP

A New Rule Embraces Modernity in the Customer Identification Process

Financial institutions across the United States have grappled with compliance requirements under the Customer Identification Program (CIP) Rule for more than two decades. A new exemption, approved in June 2025, promises...more

Nelson Mullins Riley & Scarborough LLP

FTC Guidance Confirms OEMs Are Not “Service Providers” to Dealers Under Safeguards Rule

Recently issued guidance from the Federal Trade Commission (FTC) addresses frequently asked questions about the application of the agency’s Safeguards Rule, 16 C.F.R. § 314.1 et seq., to new car dealers since the 2023...more

Troutman Pepper Locke

Driving Digital Security: The FTC's Safeguards Rule Explained — Moving the Metal: The Auto Finance Podcast

Troutman Pepper Locke on

In this episode of Moving the Metal: The Auto Finance Podcast, hosts Brooke Conkle and Chris Capurso are joined by colleagues Kim Phan and Aileen Ng for a deep dive into the Federal Trade Commission's (FTC) Safeguards Rule...more

Jackson Lewis P.C.

HB1127 Explained: North Dakota’s New InfoSec Requirements for Financial Corporations

Jackson Lewis P.C. on

Earlier this year, North Dakota’s Governor signed HB 1127, which introduces new compliance obligations for financial corporations operating in North Dakota. This new law will take effect on August 1, 2025....more

Ankura

The Regulatory Roadmap for Third-Party Compliance in Financial Services

Ankura on

In the rapidly evolving financial ecosystem, financial institutions (FIs) increasingly rely on third parties, including Fintech companies, Banking-as-a-Service (BaaS) providers, and other financial service entities—to expand...more

Fisher Phillips

New SEC Cybersecurity Compliance Deadlines are Coming: What 5 Things Should Covered Institutions Do to Prepare?

Fisher Phillips on

The SEC’s amended Regulation S-P, adopted last year, will soon enhance data privacy protections for broker-dealers, investment companies, registered investment advisors, and transfer agents. The updated rule requires these...more

Sheppard Mullin Richter & Hampton LLP

North Dakota Passes New Data Security Law for “Financial Corporations”

North Dakota recently passed a law establishing new rules for certain financial companies operating in the state – specifically “financial corporations.” The new obligations will take effect on August 1, 2025. They will apply...more

Thomas Fox - Compliance Evangelist

Innovation in Compliance: Real-Time Fraud Prevention Strategies for Financial Loss Prevention with Vince Walden

Innovation is present in many areas, and compliance professionals must not only be prepared for it but also actively embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and...more

Orrick, Herrington & Sutcliffe LLP

Financial services industry trade groups pen letter to Treasury Secretary Bessent on cybersecurity risks

On June 9, multiple financial services trade associations sent a letter to Treasury Secretary Scott Bessent expressing concerns about cybersecurity risk management practices at federal regulatory agencies following the OCC’s...more

Dacheng

China Monthly Data Protection Update: May 2025

Dacheng on

This monthly report outlines key developments in China’s data protection sector for May. The following events merit special attention...more

Blake, Cassels & Graydon LLP

Nouveau cadre relatif aux incidents de sécurité de l’information à l’intention des institutions financières québécoises

Le 23 avril 2025, le Règlement sur la gestion et le signalement des incidents de sécurité de l’information de certaines institutions financières et des agents d’évaluation du crédit (le « Règlement ») est entré en vigueur au...more

Amundsen Davis LLC

What a Tracking Technology Class Action Lawsuit Can Teach Financial Institutions

Amundsen Davis LLC on

Financial institutions that use code-based tracking technologies may soon find themselves facing increased scrutiny and legal exposure as the next wave of class action litigation begins. On December 19, 2024, a member of...more

322 Results
 / 
View per page
Page: of 13

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide