Americas

Oregon’s amended data breach notification law has new requirements, prohibits fees for security freezes and adds a specific notification timing requirement, Hunton Andrews Kurth explains.

The New York DFS data security regulation for financial services firms has a September 2018 deadline for audit trails, application security, data retention limitations, access monitoring, and encryption of non-pubic information.

The U.S. Department of Energy (“DOE”) Office of Electricity Delivery & Energy Reliability in May released its Multiyear Plan for Energy Sector Cybersecurity. Hunton Andrews Kurth explains.

Arizona recently amended its data breach notification law, which now features a 45-day breach notification requirement. Hunton Andrews Kurth explains.

Cyberattacks against a third-party platform used by an oil and gas pipeline trigger fresh questions about critical infrastructure security.

Financial services & insurance companies with New York ties must look beyond their own data cybersecurity practices when considering M&A, Patterson Belknap explains.

What is the difference between the SOC 2 Type 1 and SOC 2 Type 2 Audit? Here's the answer to that and four other common compliance questions.