Practical analysis and expert coverage across compliance frameworks, risk management, data privacy, and audit readiness.
Regulations & LawsYour phone rings. It s the Office for Civil Rights (OCR). Or maybe you get a letter. Either way, your organization is now one of the hundreds that OCR investigates each year. What you do in the next 7
Regulations & LawsWhen Analog Devices reported unauthorized access and data exfiltration on June 23, the company activated incident response, engaged external cybersecurity experts, and coordinated with law enforcement
Regulations & LawsThe Conventional Wisdom Many privacy lawyers are advising clients that if SB 690 passes, concerns about CIPA pen register claims will diminish. The California legislative committee labeled these lawsu
Regulations & LawsThe U.S. House of Representatives voted Wednesday to extend the Cybersecurity Information Sharing Act of 2015 through 2036, embedding the reauthorization in its $1.15 trillion fiscal year 2027 nationa
Get weekly security insights and compliance updates delivered to your inbox.
Regulations & LawsThe Cybersecurity Information Sharing Act of 2015 has been on a legislative rollercoaster since it first lapsed last October. With the House attaching a 10-year extension to the national defense autho
Regulations & LawsBrazil s National Data Protection Authority (ANPD) became a full regulatory agency in February 2026. The educational grace period is over. If you re processing Brazilian data, your compliance approach
Regulations & LawsYou re managing compliance across multiple U.S. states, and each one just amended its privacy law. Delaware changed its applicability threshold. Connecticut launched a data broker registry. Maryland e
Regulations & LawsYou ve built a robust GDPR compliance program. Your data protection impact assessments are thorough, your Data Subject Access Request workflows are documented, and your EU operations meet every Articl
Regulations & LawsThe FCA has highlighted a challenge you might recognize: your sanctions compliance program is functional, but governance gaps persist. While financial firms have reduced breach frequency, significant
Regulations & LawsThe Office of Management and Budget s 2026 Unified Agenda signals major changes to health privacy and interoperability requirements. If you re responsible for HIPAA compliance or health IT certificati
Regulations & LawsSouth Africa s Draft National AI Policy is set for a 60-day public consultation in March 2026. The Department of Communications and Digital Technologies has confirmed that the policy will serve as a b
Regulations & LawsThe Challenge Ace Hardware faced litigation under the California Invasion of Privacy Act (CIPA) not because they lacked a consent banner, but because the one they implemented didn t work. The company
Regulations & LawsThe Question at Hand You re preparing your compliance team for a potential competition law inspection. Your legal counsel asks: should you assume investigators need a court order before copying your b
Regulations & LawsWhat Happened In 2024, the Medusa ransomware gang attacked Summit Pathology Laboratories, a Colorado-based clinical testing facility. The breach compromised the personal and medical data of more than
Regulations & LawsThe Problem: Your Lab Runs on 1992 Rules in a 2026 Threat Landscape If you re operating a clinical laboratory under CLIA regulations, you re working within a framework that predates the commercial int
Regulations & LawsYour security team just spotted suspicious activity in your network logs. You ve got 72 hours before you re legally required to report it under most breach notification rules. But here s the problem:
Regulations & LawsYou re about to face an expensive audit you haven t planned for. When quantum computers can break today s public-key cryptography, every certificate, encryption algorithm, and cryptographic library in
Regulations & LawsYou don t need to wait until March 2027 for CISA and NIST to publish a Cryptography Bill of Materials (CBOM) standard. The executive order issued on June 22 sets a timeline for defining what should be
Regulations & LawsThe U.K. government is granting the Financial Conduct Authority (FCA) and Prudential Regulation Authority (PRA) more flexibility to make regulations without full consultations. For compliance officers
Regulations & LawsWhat Happened On June 12, the Coordinated Supervision Committee (CSC) took over the oversight of Eurodac , the EU s asylum and migration database. This marks a significant step in coordinated data pro
