News, Events, and Resources

The Biden Administration is close to signing an Executive Order (EO) that will create a federal requirement for vendors who sell their products and/or services to government customers to, among other things, disclose any...

On March 15, California Attorney General Xavier Becerra announced additional regulations relating to the "sale" of consumers' personal information as defined under the California Consumer Privacy Act....

On March 2, 2021, Microsoft announced an active zero-day exploitation by a state-sponsored threat actor group of four vulnerabilities present on 2010, 2013, 2016 and 2019 on-premises Exchange servers....

The landscape of damages is continually evolving in data privacy and security litigation. The conventional wisdom used to be that the resulting loss from a data breach was different than that sustained in traditional torts....

As the nation grappled with a global pandemic, the consumer data protection and cybersecurity landscape continued to evolve in 2020. Although multiple states introduced and passed comprehensive privacy laws, the federal...

On February 4, 2021, New York State’s Department of Financial Services (DFS) issued a seven-part “Cyber Insurance Risk Framework” (the Framework) urging insurance companies to develop a “rigorous” and “data driven...

UPDATE 3/3/21: On March 2, 2021, Virginia Governor Ralph Northam signed into law the Virginia Consumer Data Protection Act (VCDPA). This comprehensive consumer privacy law is slated to take effect on January 1, 2023, allowing...

The California Privacy Rights Act (CPRA) is a significant amendment to the California Consumer Privacy Act of 2018. It strengthens the rights of consumers regarding the control and use of their information....