Cybersecurity

With the first cybersecurity rule for public companies, and the landscape of ongoing scrutiny and enforcement, SEC registrants should not lose time in reviewing their cybersecurity postures and policies to ensure compliance and, even ahead of formal adoption of certain still-pending rules, align with best practices.

Attacks on building systems could easily be deemed within the scope of the rule and real estate owners who lease to covered entities would likely have to quickly report cyber incidents within 72 hours and payments made after a ransomware attack within 24 hours.

Many organizations — from growing start-ups to mature, well-established companies — are struggling with the new reality of what it means to manage data in an era of digital transformation, exponential data growth, and expanding regulatory regimes focusing on data management and minimization.

GAI platforms like ChatGPT and OpenAI often require very little human input, shattering this legal landscape's framework by posing a simple question: Who authored the material? We'll explore how two countries are answering this question in different ways.

Integrating AI tools into legal practice without compromising the security of sensitive client information is a paramount concern. In this article, we'll examine how AI is revolutionizing certain aspects of legal work, while offering best practices for employing these technologies and providing guidance for legal professionals in selecting the right AI products and service providers.

The increasing frequency of "bring your own device" policies creates serious implications for subpoena recipients and litigants to ensure compliance with discovery demands. And courts across the country consider such personal mobile data fair game. To avoid pitfalls —and sanctions — counsel must take proactive steps to ensure proper preservation and collection of personal mobile data and verify that clients comply.

Like so many other features of the MHMDA, data subject rights are deceptively complicated and have the potential to create significant administrative hurdles to getting it right. In this article, we examine the tricky issues in our MHMDA FAQs and take a deep dive into data subject rights.

AI is designed to accomplish goals specified by and receive directions from a human being. Thus, it has been suggested that either direct or vicarious liability may be applied to hold the human programmer who wrote the software algorithms liable for the damages caused by the AI agent.