Expert Analysis

• Opinion

  Cyber Regulators Should Rely On Existing Sources Cautiously

  

  New incident reporting rules proposed by the Cybersecurity and Infrastructure Security Agency illustrate how the use of definitions, standards and approaches from existing sources can create a complex patchwork of regulations, demonstrating that it is essential for agencies to be clear about expectations and not create unnecessary confusion, says Megan Brown at Wiley.

• 4 Ways To Refresh Your Law Firm's Marketing Strategy

  

  With many BigLaw firms relying on an increasingly obsolete marketing approach that prioritizes stiff professionalism over authentic connection, adopting a few key communications strategies to better connect with today's clients and prospects can make all the difference, say Eric Pacifici and Kevin Henderson at SMB Law.

• Tips For Balanced Board Oversight After A Cyberincident

  

  The U.S. Securities and Exchange Commission's cybersecurity disclosure rules, as well as recent regulatory enforcement actions bringing board governance under scrutiny, continue to push boards toward active engagement in relation to their cyber-oversight role, despite it being unclear what a board's level of involvement should be, say attorneys at Alston & Bird.

• What Cos. Are Reporting Under New SEC Cybersecurity Rule

  

  Four months after its effective date, 14 companies have made disclosures under the U.S. Securities and Exchange Commission's mandatory cybersecurity incident reporting rule, and some early trends are emerging, including a possible rush to file, say attorneys at Debevoise.

• Data Protection Steps To Consider After Biden Privacy Order

  

  A recent White House executive order casts a spotlight on the criticality of securing sensitive content communications, presenting challenges and necessitating a recalibration of practices, especially for lawyers, says Camilo Artiga-Purcell at Kiteworks.

• The Future Of BIPA Insurance Litigation After Visual Pak

  

  A recent Illinois appellate court decision, National Fire Insurance v. Visual Pak, may have altered the future of insurance litigation under the state's Biometric Information Privacy Act by diametrically opposing a prominent Seventh Circuit ruling that found insurance coverage for violations of the act, say attorneys at Jenner & Block.

• Consumer Privacy Takeaways From FTC Extraterritorial Action

  

  With what appears to be its first privacy-related consent agreement with a non-U.S. business, the Federal Trade Commission establishes that its reach is extraterritorial and that consumer internet browsing data is sensitive data, and there are lessons for any multinational business that handles consumer information, say Olivia Greer and Alexis Bello at Weil.

• Series

  Whitewater Kayaking Makes Me A Better Lawyer

  

  Whether it's seeing clients and their issues from a new perspective, or staying nimble in a moment of intense challenge, the lessons learned from whitewater kayaking transcend the rapids of a river and prepare attorneys for the courtroom and beyond, says Matthew Kent at Alston & Bird.

• Navigating Kentucky's New Consumer Privacy Law

  

  On April 4, Kentucky passed a new law that imposes obligations on affected businesses relating to the collection, use and sale of personal data — and those operating within the state must prepare for a new regulatory landscape governing the handling of consumer data, say Risa Boerner and Martha Vázquez at Fisher Phillips.

• This Earth Day, Consider How Your Firm Can Go Greener

  

  As Earth Day approaches, law firms and attorneys should consider adopting more sustainable practices to reduce their carbon footprint — from minimizing single-use plastics to purchasing carbon offsets for air travel — which ultimately can also reduce costs for clients, say M’Lynn Phillips and Lisa Walters at IMS Legal Strategies.

• New Proposal Signals Sharper Enforcement Focus At CFIUS

  

  Last week's proposed rule aimed at broadening the Committee on Foreign Investment in the United States' enforcement authority over foreign investments and increasing penalties for violations signals that CFIUS intends to continue expanding its aggressive monitoring of national security issues, say attorneys at Kirkland.

• 4 Ways AI Tools Can Improve Traditional Merger Analyses

  

  Government officials at the American Bar Association's annual antitrust spring meeting last week reinforced the view that competition cases will increasingly rely on sophisticated data analysis, so companies will likewise need to use Big Tech quantitative techniques to improve traditional merger analyses, say Patrick Bajari, Gianmarco Calanchi and Tega Akati-Udi at Keystone.

• What FinCEN Proposed Customer ID Number Change Means

  

  The Financial Crimes Enforcement Network's recent request for comment on changing a requirement for banks to collect full Social Security numbers at account sign-up represents an important opportunity for banks to express their preferability, as communicating sensitive information online may carry fraud or cybersecurity risks, say attorneys at Crowell & Moring.

• How Companies Can Use Big Data As A Strategic Asset

  

  Artificial intelligence technology powered by big data has the potential to create radical improvements to business operations, but if big data is improperly protected or monetized, this same information can give competitors similar advantages, or at the very least undermine a company's edge, say Gary Weinstein and Hudson Peters at Faegre Drinker.

• Cos. Should Mind Website Tech As CIPA Suits Keep Piling Up

  

  Businesses should continue evaluating their use of website technologies and other data-gathering software and review the disclosures in their privacy policies, amid an increase so far in 2024 of class actions alleging violations of the California Invasion of Privacy Act's pen register and trap-and-trace provisions, say attorneys at Sheppard Mullin.