Wait, that’s covered? Insurability of Fines and Penalties Flowing From a Cybersecurity Breach
FCPA Compliance and Ethics Report-Episode 31-the FCPA Year in Review, Corporate Enforcement Actions
FCPA Compliance and Ethics Report-Episode 30-Interview with the FCPA Professor-Part 2
Condo complaints not in writing?
Health Data on Leased Photocopier Costs Company $1.2m—What Others Can Learn
European Commission ("EC") issues its first fining decision for a no-poach agreement, and also sanctions for the first time the exchange of sensitive information between a company and its competing, non-controlling minority...more
2024 saw a significant increase in overall global fines for antitrust enforcement, with total penalties for the jurisdictions surveyed in our report at USD6.7 billion, over double that of 2023 (USD2.9bn) and substantially...more
Executive Summary - We entered 2025 with the world in turmoil, a new American administration in the White House, and various global actors—friends and foes alike—still actively vying for the attention of the American public. ...more
NIS2 (Network and Information Systems Directive 2) is the updated version of the NIS Directive, which the EU first introduced in 2016. The original NIS Directive aimed to enhance cybersecurity across member states by...more
It’s not immediately obvious why someone would want to disclose a health care test result as part of a job application. But one such request spurred a Pennsylvania entity to provide a lot more than that: it sent her whole...more
Intentional signature forgery, particularly concerning cheques, is a serious offence under UAE law. It challenges the trust in financial transactions and causes significant harm to both individuals and businesses. The UAE has...more
Change Healthcare Inc. has amended its initial breach report to the HHS Office for Civil Rights (OCR) to state that 100 million individuals were impacted by its mammoth ransomware attack and breach. However, as of Oct. 24,...more
On November 7, 2024, the CFPB ordered one of the largest credit unions in the nation to pay over $95 million for its practices related to the imposition of overdraft fees. The enforcement action addresses practices from 2017...more
Editor’s Note: This webcast brings together some of HaystackID’s top experts to dissect the intricacies of Business Email Compromise (BEC) attacks—a rapidly growing threat impacting organizations globally. During the...more
On October 24, 2024, the European Court of Justice (ECJ) confirmed the annulment by the General Court (GC) of the European Commission’s (EC) decision to impose a EUR 1.06 billion fine on Intel for the abuse of a dominant...more
Last week, representatives of the US government announced one of the largest sets of fines and penalties for failures in anti-money laundering ever laid down. It involved TD Bank N.A. and TD Bank US Holding Company. It was...more
The Justice Department is encouraging companies to voluntarily disclose criminal violations — “Come in and confess” and DOJ offers promises of a declination. But even a declination comes with a requirement — the company has...more
Background - The Corporate Transparency Act of 2019 (“CTA”) became effective on January 1, 2024. Under the CTA, all “reporting companies” must file a Beneficial Ownership Information (BOI) report with the Financial Crimes...more
It has been reported that the European Central Bank will be imposing fines on as many as four lenders due to “not meeting deadlines set by the ECB for assessing their exposure to climate risks.” Specifically, ECB regulations...more
In the world of compliance and ethics, the Citigroup internal control debacle serves as a glaring reminder of the critical importance of robust, well-designed, functioning and effective internal controls. The U.K. Financial...more
The push by U.S. states to pass data privacy laws continues with Maryland being the 18th state to join their ranks. However, Maryland has taken a more stringent and comprehensive approach than many of its peers: Governor Wes...more
As U.S. states continue to pass data privacy legislation, Maryland has gone above and beyond in signing both the Maryland Online Data Privacy Act of 2024 (MODPA) and the Maryland Age Appropriate Design Code (HB 603/SB...more
On March 13, 2024, Utah enacted the Utah Artificial Intelligence Policy Act (UAIP), which imposes certain disclosure requirements on entities using generative AI tools with their customers, and limits an entity’s ability to...more
Regulators with the Federal Reserve and the Office of the Comptroller of the Currency (“OCC”) have fined JP Morgan Chase & Co. a combined total of $348.2 million over the bank’s failure to monitor client trading activities...more
On January 16, 2024, New Jersey Governor Phil Murphy signed Senate Bill (SB) 332, establishing New Jersey’s consumer data privacy law, the New Jersey Data Privacy Act (NJDPA) which will be effective January 15, 2025. This...more
Report on Patient Privacy 23, no. 11 (November, 2023) Tim DiBona clearly remembers Christmas Eve 2018 when the staff of his small firm—Doctors’ Management Service (DMS)—arrived at their West Bridgewater, Mass., office to...more
Introduction: In the rapidly advancing digital age, cybercrime has become a serious global concern, and the UAE is not immune to this threat. Scammers are becoming increasingly sophisticated, using tactics such as fake calls,...more
When announcing the much publicized $125 million fine against JP Morgan for violating recordkeeping rules, the U.S. Securities and Exchange Commission (“SEC”) Chair stated that financial institutions “did not act as if they...more
If there ever is an example of a rotten corporate culture, Wells Fargo sits at the head of the class. Since Wells Fargo’s sales pressure scandal, Wells Fargo has continued to suffer from a string of scandals and misconduct. ...more
In this month’s Privacy & Cybersecurity Update, we analyze recent fines against Meta and their impact on the future of behavioral advertising, the timeline for the California Privacy Rights Act’s regulations to become...more