837 articles · showing 121–180 of 14 pages
This law aims to promote transparency, accountability, and fairness in the use of AI, addressing concerns around bias and inequality. It sets a precedent for other states to follow and provides a fram...
This high-stakes settlement highlights how critical vulnerabilities can have far-reaching financial consequences for organizations and demonstrates the importance of prioritizing proactive vulnerabili...
This case underscores the importance of vendor risk management and due diligence in the healthcare industry. Companies working with third-party vendors must ensure they have adequate cybersecurity mea...
The settlement marks a conclusion to a high-profile data breach case involving 23andMe, where customer genetic data and other sensitive information were compromised. The breach also led to the company...
Charter's handling of customer data has raised concerns about its protection and transparency in the wake of a data breach that potentially affected over 40 million customers. The lawsuit underlines t...
The article discusses a data breach at Novo Nordisk and highlights the difference between pseudonymized and anonymous data in compliance with the GDPR. Despite Novo Nordisk's claims, the breach showed...
This landmark case highlights the severity of consequences for companies that fail to adequately protect sensitive customer data. Coupang's data breach exposed vulnerabilities in its system, leading t...
AI has transformed the security landscape, allowing companies to leverage machine learning models to prevent and detect threats in real-time. This has sparked a shift in the way software development a...
Researchers are struggling to find the right balance between disclosing vulnerabilities in AI systems and protecting national-security interests. The article argues that a structured approach to vulne...
The article highlights the emerging trend of revocable AI models, which poses significant risks to organizations that rely on them. To mitigate these risks, a comprehensive vendor-risk and continuity ...
The export control of AI models is a growing concern, as the Washington state government's oversight of Fable 5 highlights the need for refined processes and foresight when handling complex technologi...
The US government is imposing a deadline for the transition to post-quantum cryptography to prevent vulnerabilities in cryptographic systems, particularly with legacy FIPS 140-2 certificates that use ...
The OCR's HIPAA Risk Analysis Initiative is evolving to prioritize risk management in 2026, reflecting the growing importance of proactive risk assessment in healthcare cybersecurity. This expansion w...
The introduction of CMMC Phase 2 will bring increased scrutiny to defense contractors, requiring them to demonstrate more robust cybersecurity practices and secure their supply chain. The new phase wi...
As state privacy laws continue to proliferate, businesses are confronting a challenging environment of varying regulations that will necessitate more significant investment in compliance infrastructur...
The EU's CSRD Omnibus has drastically reduced the number of companies required to report on sustainability, effectively exempting 90% of entities. This move aims to simplify reporting and prioritize l...
The EU's AI Act has seen its deadline postponed due to a digital omnibus law, which has implications for companies developing and deploying AI solutions. The delay gives them more time to adapt to the...
This article reports on the recent developments in the TCPA (Telephone Consumer Protection Act) regulation, highlighting the elimination of the one-to-one consent rule and the delay of the revocation-...
This landmark legislation sets a new standard for state-level data privacy laws, reflecting a growing shift in regulatory priorities. The private right of action provision empowers individuals to take...
TRAIGA represents a notable state-level AI regulatory framework that prioritizes individual rights and data protection. Its effectiveness in balancing innovation with responsible AI development will b...
The new New York law is a landmark piece of legislation that takes a more robust approach to health data privacy than HIPAA, with a focus on empowering individuals with control over their sensitive he...
The article highlights the importance of supply-chain integrity in cybersecurity, warning that a compromised security vendor can have far-reaching consequences, including national security risks. It a...
The Amazon consent signal deadline drives the focus to GDPR compliance at the API layer, compelling companies to update their workflows to protect data. As this deadline approaches, organizations are ...
The FTC's order serves as a warning to all data-handling companies to move beyond mere statements about taking security seriously and instead implement effective security measures and practices. Compa...
This article highlights a significant data breach affecting millions of patient records in the healthcare sector. As a result, benefits administrators, and their parent companies, are facing scrutiny ...
The EU is taking a more comprehensive approach to cyber-resilience with the implementation of DORA and NIS2. These regulations will require organizations to implement robust cybersecurity measures and...
This case represents a high-stakes showdown between a tech company and regulatory oversight, highlighting the complexities of data privacy and the role of the FTC in enforcing consent orders. The cour...
The article examines the differing stances of the US and EU on AI governance, with the US focusing on voluntary standards and risk-based approaches, while the EU seeks to establish a comprehensive and...
The PCI DSS v4.0.1 compliance deadline has arrived, with merchants and service providers required to implement the updated standard by June 2026. The new requirements focus on strengthening security c...
The article provides an in-depth analysis of the Trump administration's Executive Order on AI, highlighting the importance of transparency and explainability in AI development and deployment. The orde...
The OCR's recent settlements suggest that healthcare organizations are increasingly vulnerable to ransomware attacks, emphasizing the need for proactive risk management and incident response planning....
The Q2 2026 ransomware wave, driven by groups like Qilin and ShinyHunters, underscores the importance of robust security measures and compliance with industry standards. Companies that fail to impleme...
The passage of S.71 highlights the increasing trend of state-level data privacy regulations, which can create compliance challenges for businesses. Companies must adapt to the evolving landscape of da...
With the EU AI Act set to begin enforcement in 60 days, businesses are facing a scramble to understand and comply with its complex regulations. The remaining time will be crucial for firms to adapt an...
The SECURE Data Act aims to establish a national data privacy standard, potentially preempting existing state laws. Compliance teams must now monitor the bill's progress and prepare for potential chan...
Please provide the excerpt from the cybersecurity article so I can write a 2-sentence synopsis....
Charter Communications, operating under the Spectrum brand, suffered a data breach affecting approximately 13 million customers. The breach, attributed to the ShinyHunters hacking group, raises questi...
This article explores how three different frameworks – the FTC Safeguards Rule, IRS regulations, and the NIST AI Risk Management Framework – all impact the deployment of AI in handling tax return data...
A study of SEC filings over two years since the cybersecurity disclosure rules went into effect reveals 29 material incidents disclosed and 50 voluntary filings. The data provides insights into how co...
The Office for Civil Rights (OCR) fined Lafourche Parish Government $245,000 for HIPAA violations, reminding employers overseeing self-funded health plans that they are HIPAA-covered entities. This hi...
MMG Fusion, a healthcare marketing company, settled with the HHS for $10,000 after a breach impacting over 15 million records, stemming from a subcontractor's abandonment of data. The settlement highl...
The Oncology Institute suffered a data breach through a vendor, compromising patient information and triggering HIPAA compliance requirements. This incident also necessitates potential SEC disclosure ...
Cox Media Group settled with the FTC over allegations that its "active listening" AI technology deceived consumers by collecting and analyzing audio data without proper consent. The FTC's complaint hi...
This landmark settlement demonstrates the increasing scrutiny of data protection practices, particularly in the context of data minimization under CCPA. It highlights the importance of companies prior...
The 2026 Verizon DBIR reveals that vulnerability exploitation has surpassed credential theft as the leading attack vector for the first time in 19 years. This shift signifies a change in attacker stra...
The Department of Health and Human Services (HHS) is planning to update the HIPAA Security Rule to address emerging cybersecurity threats, but the final rule is still pending. Despite the lack of a fi...
The EU AI Act's May 2026 omnibus introduces prohibitions on certain AI systems deemed unacceptable risks, especially concerning National Critical Infrastructure Institutions (NCII). Companies need to ...
West Pharmaceutical Services, a major healthcare supplier, disclosed a recent ransomware attack in an SEC filing, highlighting the growing cybersecurity risks within the healthcare supply chain. Vendo...
South Staffordshire Water was fined £963,000 by the ICO for failing to implement adequate security measures that led to a Cl0p ransomware attack in 2022. The fine highlights the long delay in regulato...
Please provide the excerpt from the cybersecurity article so I can write a 2-sentence synopsis....
The Department of Health and Human Services aims to finalize updates to the HIPAA Security Rule by May 2026. Regardless of potential shifts in priorities due to the upcoming presidential election, cov...
A new report forecasts that the average ransomware demand in the healthcare sector will reach $16.9 million by 2026, driven by the increasing value of stolen patient data. The report also highlights a...
The EU AI Act's omnibus deal pushes the deadlines for compliance with high-risk AI systems to 2027 and 2028. While some aspects have been delayed, the core structure and principles of the Act remain i...
The TAKE IT DOWN Act mandates that online platforms with primarily sexual content establish a process for removing illegal visual depictions of child sexual abuse or exploitation upon notification. Fa...
I am sorry, I do not have access to the article you're referencing. If you provide the excerpt, I will write a 2-sentence synopsis of the cybersecurity article....
AI-built healthcare products are struggling to gain traction in the market due to their high costs, often stemming from meeting Business Associate Agreement (BAA) compliance requirements. A minimal vi...
Colorado has passed SB 189, repealing the Colorado AI Act and establishing a new regulatory framework focused on developers of high-risk automated decision-making tools (ADMTs). Starting January 1, 20...
China's proposed amendments to its Cybersecurity Law and its 2026 AI governance agenda signal increased regulatory scrutiny over data security, cross-border data transfers, and AI development. Multina...
GDPR fines have reached €7.1 billion after eight years, revealing trends in enforcement. Data analysis indicates where regulators are focusing their attention and provides insights into future complia...
European Data Protection Board (EDPB) coordinated enforcement action in 2024 involves 25 European regulators auditing privacy notices across various sectors. The focus is on ensuring transparency and ...