Compliance into the Weeds: Sanctions Compliance Failures: Lessons from Harman International and Interactive Brokers
Sanctions Compliance Failures: Lessons from Harman International and Interactive Brokers
Adventures in Compliance: The Novels – The Hound of the Baskervilles, Introduction and Compliance Lessons Learned
Compliance Tip of the Day: Assessing Internal Controls
Compliance Tip of the Day: COSO Objective 5 – Monitoring Activities
Compliance Tip of the Day: COSO Objective 2 - Risk Assessment
FCPA Compliance Report: Fraud Risk Management - Insights and Experiences with Peter Schablik
#Risk New York Speaker Series – Inside Behavioral Insights: Tom Hardin on Compliance at #RiskNYC
Compliance Tip of the Day: COSO Framework
#Risk New York Speaker Series: Exploring AI Risks in Compliance with Gwen Hassan
Healthcare Enterprise Risk Management
Managing Sanctions Compliance
Regulatory Ramblings: Episode 68 - Why Geopolitical Risk Matters to Compliance and Legal Staff with Mark Nuttal and Chad Olsen
FCPA Compliance Report: Amanda Carty on a Due Diligence and Risk Management
Episode 364 -- Five Strategies to Mitigate a New Risk Environment
Strengthening Compliance: Lessons From the OCC's Consent Order With Patriot Bank — Payments Pros – The Payments Law Podcast
Compliance and AI: Ali Khan on Implementing AI Risk Management Systems
Compliance Tip of the Day: Superforecasting
Compliance Tip of the Day: The Last Mile
Key Takeaways From the OIG's New Compliance Guidance for Nursing Facilities — Assisted Living and the Law Podcast
Risk and compliance leaders face increasing demands to elevate board conversations beyond compliance checkboxes. Boards expect clear insight into how risks affect strategic execution, financial performance, and enterprise...more
If you thought your company's collection of email address, IP address, zip code, birth date, or cookie data was too mundane to catch the federal government's attention – think again. Effective April 8, 2025, a new DOJ final...more
As described in an earlier alert, the Department of Justice (DOJ) recently announced a 90-day pause in enforcement of the "Bulk Data Rule" for entities engaging in good faith compliance. That 90-day grace period ends on July...more
On 15 April 2025, the European Commission (the “Commission”) released new simplification measures relating to the EU Deforestation Regulation (“EUDR”) with the promise of ensuring a “simple, fair and cost-efficient...more
The OECD's AI recommendations encourage Member States to uphold principles of trustworthy AI. Status of the AI Regulations - The Adherents have agreed to promote, implement, and adhere to the Recommendation. The Principles...more
On March 11, 2025, the Financial Crimes Enforcement Network (FinCEN) issued a Geographic Targeting Order (GTO) requiring all money services businesses (MSBs) operating within 30 specified ZIP codes near the U.S.-Mexico border...more
CI’s 9th Annual Canadian Forum on Global Economic Sanctions is designed to cover your top compliance challenges, offering unparalleled networking and benchmarking opportunities for economic sanctions, trade, financial crime,...more
So, for those of you who missed last year’s “The Grinch Who Stole Compliance,” never fear: We have an endless supply of compliance-related holiday mirth. After all, who doesn’t like a bit of eggnog and the traditional singing...more
Our Privacy, Cyber & Data Strategy Team discusses the new Cyber Resilience Act (CRA) that affects manufacturers and distributors of connected devices that are in use anywhere in the European Union....more
New York hospitals have less than a year to dust off their Health Insurance Portability and Accountability Act (HIPAA) compliance programs and update them to comply with more stringent and detailed state regulations. Last...more
On October 2, 2024, New York adopted new regulations requiring general hospitals to implement heightened cybersecurity safeguards. General hospitals, as defined in Article 28 of the NY Public Health Law, generally must begin...more
On September 23, 2024, DOJ announced updates to its Evaluation of Corporate Compliance Programs guidelines (Guidance). The updates are the latest in a series of updates (including in 2019, 2020, and 2023) since DOJ first...more
Last week, the California Legislature passed several bills that, if signed by the governor, will regulate how organizations develop, train, and use artificial intelligence (AI) models, systems, and applications. Of these...more
In this blog post, we will focus on obligations that the European Union’s Artificial Intelligence Act (AI Act) sets for deployers, providers, importers and distributors regarding high-risk AI systems....more
This guidance aims to support the preparation and analysis of reports using the European Sustainability Reporting Standards. On 31 May 2024, EFRAG published the first three Implementation Guidance (IG) documents relating...more
On February 13, 2024, the U.S. Treasury Department’s Financial Crimes Enforcement Network (“FinCEN”) issued a notice of proposed rulemaking (the “Proposed Rule”) that would subject registered investment advisers (“RIAs”) and...more
The U.S. Department of Health and Human Services, Office of Inspector General (“OIG”) recently published a new resource titled General Compliance Program Guidance (“GCPG”), which is described as a reference guide for the...more
Last month the Federal Acquisition Regulatory (FAR) Council announced a major proposal regarding cybersecurity incident reporting and information. Comments currently are now due by February 2, 2024....more
The federal banking agencies recently issued final interagency guidance concerning how large banks may control for climate-related financial risks (“climate risks”). The guidance is largely consistent with the proposal and...more
California has recently passed and signed into law two significant pieces of climate legislation: Senate Bill 253 (SB 253), better known as the Climate Corporate Data Accountability Act, and Senate Bill 261 (SB 261) focused...more
California recently enacted two sweeping and unprecedented laws that will require virtually all large companies who do any amount of business in California in any industry or sector to disclose their direct and indirect...more
Real estate syndication involves pooling funds from multiple investors to finance a real estate project. While syndication can be a profitable investment strategy, it also comes with various legal considerations and potential...more
On March 30, 2023, the Committee of Sponsoring Organizations of the Treadway Commission (“COSO”), an organization comprising five private-sector organizations with the goal of helping companies improve their performance by...more
A recent news report reminded me of how difficult it can be to manage compliance and environmental, social, and governance (ESG) risks. You may have seen the report: a tiny capsule the size of a small coin fell out of a truck...more
In line with the UK’s Net Zero Strategy, the UK became the first G20 country to adopt the recommendations of the Taskforce on Climate-related Financial Disclosures (TCFD), with effective dates rolling out for different...more