Features

Lessons for CISOs from the SolarWinds Breach and SEC Enforcement
In an era where digital threats loom large, the responsibilities of Chief Information Security Officers have expanded beyond traditional IT security to encompass a broader governance, risk management, and compliance role. The infamous SolarWinds Corp. attack illustrates the complex cybersecurity landscape CISOs navigate.
Features

Shielding Law Practices: Mitigating Vendor Risks to Safeguard Client Confidentiality
Because vendors often access clients' internal systems, customer data, and intellectual property, they will always be a magnet for hackers searching for valuable data. Bad actors will always look for the weak spots in a firm's defenses, including those deployed by a firm's vendors and other third parties. And signs point to a growing number of cyberattacks, not a lessening of them.
Features

A Roadmap for Implementing Information Governance In Law Firms
In today's digital age, the volume of data generated and managed by law firms has skyrocketed, presenting both opportunities and challenges. Unfortunately, in parallel with this exponential growth in data, and partially as a direct result of it, law firms have also experienced a significant increase in targeted cyberattacks.
Features

Navigating Custody and Control: Ownership of Smartphone Data and Enforcement of Usage Policies
New regulations from the DOJ around the ownership and governance of company data on personal devices are catching up to the way the world actually works. It's going to make companies' lives a lot harder — and for precisely the same reason that smartphones have made their lives a lot easier.
Features

Is Genetic Information the Next Privacy Battleground?
GIPA litigation remains in its early stages, but the possibility of exorbitant statutory damages could make GIPA the next major trend in privacy class action litigation.
Features

New Federal Privacy Legislation Has Legitimate Shot At Passing
For years, the business community has been calling for a comprehensive federal privacy law, frustrated with operating under a patchwork of sometimes-conflicting state laws. Now, Congress is considering one that's extremely wide-ranging and that observers say has a legitimate chance of passage.
Features

Crafting an Effective Roadmap for Implementing Information Governance In Law Firms
This article discusses why a robust IG program is critical to modern-day law firm operations, the complexities associated with crafting such a program, and what a high-level roadmap for implementing the program looks like.
Features

Navigating the SEC's New Cybersecurity Disclosure Rules
With the first cybersecurity rule for public companies, and the landscape of ongoing scrutiny and enforcement, SEC registrants should not lose time in reviewing their cybersecurity postures and policies to ensure compliance and, even ahead of formal adoption of certain still-pending rules, align with best practices.
Features

Proposed Cybersecurity Rule Could Affect Many CRE Landlords
Attacks on building systems could easily be deemed within the scope of the rule and real estate owners who lease to covered entities would likely have to quickly report cyber incidents within 72 hours and payments made after a ransomware attack within 24 hours.
Features

Privacy Risk Management & Data Minimization
Many organizations — from growing start-ups to mature, well-established companies — are struggling with the new reality of what it means to manage data in an era of digital transformation, exponential data growth, and expanding regulatory regimes focusing on data management and minimization.
Need Help?
- Prefer an IP authenticated environment? Request a transition or call 800-756-8993.
- Need other assistance? email Customer Service or call 1-877-256-2472.
MOST POPULAR STORIES
- Law Firms and the Rise of HospitalityThe law firm office cannot remain unchanged, as if frozen in time set to some date prior to the onset of pandemic, when the terms and meaning have all changed. In fact, the office must now provide benefits or an experience the lawyers and staff cannot get at home.Read More ›
- The DOJ's Corporate Enforcement Policy: One Year LaterThe DOJ's Criminal Division issued three declinations since the issuance of the revised CEP a year ago. Review of these cases gives insight into DOJ's implementation of the new policy in practice.Read More ›
- From the PTO to the FDA: What to Consider When Branding Clinical TrialsThe legal implications of branding generally arise initially for companies during the process of selecting a company name and any initial product or service names. For drug development companies, however, careful consideration should also be paid to the implications of branding a clinical trial.Read More ›
- Disconnect Between In-House and Outside Counsel'Disconnect Between In-House and Outside Counsel is a continuation of the discussion of client expectations and the disconnect that often occurs. And although the outside attorneys should be pursuing how inside-counsel actually think, inside counsel should make an effort to impart this information without waiting to be asked.Read More ›