News & Analysis as of

Third-Party Risk Management

Mitratech Holdings, Inc

Third-Party Risk Management: The Definitive Guide

In a world with increasingly interconnected companies, vendors, suppliers, logistics partners, and cloud services providers, Third-Party Risk Management (TPRM) has advanced from being an annual checklist exercise to a...more

Proskauer Rose LLP

Safeguarding Reforms in the UK and EU – Preparing for Change

Proskauer Rose LLP on

The FCA has completed a major review of safeguarding for payment and e-money institutions. Its new rules are designed to reduce the risks seen in recent failures – where customers faced long delays and, on average, recovered...more

Hanzo

Compliance Under Pressure: Audit Readiness for Healthcare Providers

Hanzo on

In today’s healthcare environment, compliance is a defining element of patient care quality, operational integrity, and public trust. Oversight from agencies such as the Office for Civil Rights (OCR), the Centers for Medicare...more

White & Case LLP

2025 Summer review - M&A legal and market developments

White & Case LLP on

We set out below a number of interesting English court decisions and market developments which have taken place and their impact on M&A transactions. Our Summer 2025 review examines these developments and provides practical...more

IR Global

Client Beware: The Utilization of Artificial Intelligence Platforms and the Potential Waiver of Attorney-Client Privilege

IR Global on

The rapid evolution of digital technologies has ushered in a new era for the legal profession—one characterized by both unprecedented promise and intricate new hazards. As practitioners and clients alike become more reliant...more

Morgan Lewis

New Restatement Rule Expands Vicarious Liability for Employee Sexual Misconduct

Morgan Lewis on

The American Law Institute approved a controversial new provision of the Restatement of Torts, Third expanding vicarious liability to employers for certain sexual assaults committed by employees against third parties who are...more

Woods Rogers

Workplace Sexual Assault and Third-Party Risk: What’s the Tea in L&E?

Woods Rogers on

In this episode of What’s the Tea in L&E, Labor & Employment attorney Raven Burks joins host Leah Stiegler to unpack risks that all employers have when dealing with a sexual assault in the workplace to another employee or...more

Ankura

Engineering Confidence: 14 Critical Questions for Secure LLM and RAG Deployment

Ankura on

The rapid evolution of large language models (LLMs), retrieval-augmented generation (RAG), and Model Protocol Context (MCP) implementation has led many developers and teams to quickly adopt and integrate these powerful...more

StoneTurn

Safeguarding Privilege Between Counsel and Investigations and Crisis Communications Consultants

StoneTurn on

When a corporate crisis hits, attorneys often bring in investigators and PR consultants to uncover facts and manage reputational risk. But without the right structure, those critical communications may not be protected by...more

A&O Shearman

Mitigating third-party provider cybersecurity risks navigating the Australian legal framework

A&O Shearman on

Cybersecurity breaches originating from third-party providers (TPPs) are an escalating concern for Australian businesses. As supply chain risks grow, there is a mounting public expectation that the entity that commissioned...more

Womble Bond Dickinson

AI Governance Playbook: Building an AI Governance Program that Works

Womble Bond Dickinson on

Why do companies need AI governance policies and procedures? In part because the legal landscape around AI is so unsettled....more

Morrison & Foerster LLP

Crypto-Asset Safekeeping: What’s Involved If You’re a Bank (or if You Want to Be One)

On July 14, 2025, the federal banking agencies issued a joint statement to clarify regulatory expectations for banking organizations that provide or are considering providing safekeeping for crypto-assets (“Joint Statement”)....more

Jones Day

Brand Protection and Enforcement Under the DSA: Opportunities and Challenges

Jones Day on

The Digital Services Act ("DSA"), which entered into force for all intermediary services and online platforms in February 2024, aims to modernize and harmonize the regulation of third-party content across the EU. It notably...more

Foley & Lardner LLP

Episode 36: Let’s Talk Compliance: The Risks and Pitfalls of Health Care Supply Chain Compliance

Foley & Lardner LLP on

In this episode, Monica Chmielewski, vice chair of Foley’s Health Care Practice Group and Shannon Sumner, Chief Compliance Officer and Nashville’s Office Managing Principal of PYA explore how supply chain compliance is...more

Husch Blackwell LLP

New Exemption Order Creates More Flexibility and More Considerations with the Customer Identification Program Rule

Husch Blackwell LLP on

By an exemption order dated June 27, 2025, federal prudential regulators have given banks and credit unions some welcomed flexibility when collecting an individual’s or entity’s taxpayer identification number (TIN) during...more

Jackson Lewis P.C.

CCPA Compliance Reminder: Annual Update Requirement for Online Privacy Policies

Jackson Lewis P.C. on

For businesses subject to the California Consumer Privacy Act (CCPA), a compliance step often overlooked is the requirement to annually update the businesses online privacy policy. Under Cal. Civ. Code § 1798.130(a)(5),...more

Baker Donelson

Tennessee Allows Hospital-Based Physician Employment and Licensure of Anesthesiologist Assistants

Baker Donelson on

Tennessee Governor Bill Lee signed House Bill No. 979 into law on May 21, 2025, enacting significant changes to Tennessee's corporate practice of medicine prohibition. Prior to this law, certain hospital-based physicians –...more

Paul Hastings LLP

SEC Withdraws 14 Pending Rule Proposals

Paul Hastings LLP on

On June 12, the Securities and Exchange Commission (SEC) formally withdrew 14 proposed rules for investment advisers, broker-dealers and public companies, many of which had been pending for several years. Should the SEC...more

Robinson+Cole Data Privacy + Security Insider

Adidas and UChicago Sued Over Data Breaches Caused by Third-Party Vendors

What do a global sportswear giant and a prestigious medical center have in common? Apparently, a shared struggle defending data breach lawsuits for breaches of sensitive personal information caused by third-party vendors....more

Verrill

Plan Sponsors: How much thought have you given to your defined contribution retirement plan’s default beneficiary hierarchy?

Verrill on

Despite efforts by plan sponsors and third-party administrators/plan recordkeepers to communicate to defined contribution retirement plan participants the importance of designating a beneficiary to receive any remaining...more

Benesch

Tracking Technology Trouble: Shah v. Capital One Deepens Legal Risk Under CCPA and CIPA

Benesch on

In Shah v. Capital One Financial Corporation, the Northern District of California handed down a ruling that may shape the trajectory of litigation involving tracking technologies, online privacy policies, and California’s...more

Baker Botts L.L.P.

CCPA Class Actions Without a Data Breach; Courts Signal a New Litigation Frontier.

Baker Botts L.L.P. on

Two recent decisions from the Northern District of California—Shah v. Capital One Financial Corp., No. 24-cv-05985-TLT, 2025 WL 714252 (N.D. Cal. Mar. 3, 2025), and M.G. v. Therapymatch, Inc., No. 23-cv-04422-AMO, 2024 WL...more

Thomas Fox - Compliance Evangelist

Compliance Tip of the Day: Leveraging AI for Real-Time Third-Party Risk Management

Welcome to “Compliance Tip of the Day,” the podcast where we bring you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned...more

Morgan Lewis - Tech & Sourcing

Sourcing 360: Examining Troubled Digital Implementations and How the Contract Matters

Digital transformation continues to be a buzzword for 2025, with companies considering or implementing new user-facing and back-office artificial intelligence (AI) solutions and other digital tools to enhance end-user...more

Alston & Bird

Addressing Data Integrity Challenges in Medical Device Submissions

Alston & Bird on

The Food and Drug Administration’s (FDA) recent rejection of all study data from Mid-Link Testing highlights the importance of using reliable, valid data for medical device premarket submissions. Our FDA/Food, Drug & Device...more

159 Results
 / 
View per page
Page: of 7

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide