Cybersecurity and Privacy

Subscribe to Cybersecurity and Privacy via RSS

Corporate compliance programs come in all shapes and sizes and apply whether your company is privately owned or publicly traded. These internal controls take the form of accounting and audit procedures, import-export/regulatory policies, employment guidelines, ethics/anti-corruption initiatives and so on. The intent of any compliance program is to ensure that employees know what is expected…

Originally published by the Journal of Commerce in January 2016

In the lead-up to President Obama signing into law on December 18, 2015 the Cybersecurity Act of 2015, Public Law. 114-113, there was hope that finally there would be a vehicle through which the federal government would be able to share broad ranges of supply…

Originally published in January 2016

On December 18, 2015, President Obama signed into law the Cybersecurity Act of 2015. Beginning at Division N, Public Law 114-113 deals with cyber threats and includes the framework for the means and methods by which the private sector may submit such information to the government and by which the…

Originally published in September 2015.

Whether publicly traded or privately held, corporate boards have been put on notice – the Department of Justice (Justice or DOJ) is after you! On September 9th, DOJ issued a memo entitled: Individual Accountability for Corporate Wrongdoing. In it, Main Justice made clear to all offices that any activity…

Well, the new deal has been struck between the EU and the U.S. What was called the EU-US Safe Harbor is being replaced by the newly created EU-US Privacy Shield. Now, all we need is to have the actual text released!

So far, the only official information comes from the EU press office and Commerce…

While a new Safe Harbor agreement was hoped for by the January 31, 2016 deadline, negotiations still continue. It is expected the European Commission will receive an update, but keep your fingers crossed for an actual deal! In the meantime, American companies continue to rely on recommended provisions to satisfy their privacy protection requirements.