Ask any chief information security officer (CISO), cyber underwriter or risk manager, or cybersecurity attorney about what controls are critical for protecting an organization’s information systems, you’ll likely find multifactor authentication (MFA) at or near the top of every list. Government agencies responsible for helping to protect the U.S. and its information systems and assets
Integrating Privacy Across Healthcare, Retail, and Business Operations
@media screen and (max-width: 1023px){section[data-id=”block_b2fe0df08eb45061244f8e7123a12135″]{ }}@media screen and (min-width: 1024px) and (max-width: 1365px){section[data-id=”block_b2fe0df08eb45061244f8e7123a12135″]{ }}@media screen and (min-width: 1366px){section[data-id=”block_b2fe0df08eb45061244f8e7123a12135″]{ }}
Natalie LaPorta is the Chief Privacy Officer for Walgreens, where she focuses on various privacy matters that impact US patient and consumer data privacy, including state and federal data privacy compliance, complex contract negotiations, digital privacy,
CSA releases guidance on the use of artificial intelligence in capital markets
On December 5, 2024, the Canadian Securities Administrators (CSA) released CSA Staff Notice and Consultation 11-348 – Applicability of Canadian Securities Laws and the Use of Artificial Intelligence Systems in Capital Markets (the Notice). The Notice was issued in light of the continued growth in the use of artificial intelligence (AI) systems in capital markets,
New Year, New Developments: 2025 U.S. Privacy, Cybersecurity, and Consumer Protection Predictions
With Inauguration Day just around the corner, we are likely to see a host of new legislative and enforcement initiatives at the federal level. The Federal Trade Commission (FTC) will shift certain priorities under incoming Chairman Andrew Ferguson’s direction. And at the state level, legislatures and state attorneys general (state AGs) will continue to be
Data Privacy and Cybersecurity Look Ahead: First Half of 2025
Privacy and cybersecurity are incredibly dynamic, and in 2025 we have committed ourselves to a look ahead post every six months, with the next one in July 2025. The new Congress convened on January 3, 2025, and a new administration starts on January 20. Most state legislatures reconvene in early-to-mid January. If you track privacy
Dark Patterns and You
Over the past two years, privacy legislation and regulation has focused on a variety of issues. How companies can collect and use sensitive information (healthcare data, geolocation, financial data and the like) and how they respond to consumer requests often take top billing. But “dark patterns” can impact not only a company’s disclosures, but its
What is Automated Decisionmaking Technology (ADMT) under CCPA proposed regulations?
On November 8, 2024, the California Privacy Protection Agency (CPPA) voted to advance proposed regulations concerning automated decisionmaking technology. While the comment period is ongoing and we do not have final rules, we are taking a look at some key provisions to help businesses begin to assess the potential effects of these rules if made
State AI Update: January 6, 2025
Our latest edition of Byte Back AI is now available to paid subscribers. In this edition, we provide:
- An update on new AI bills filed in New York, Maryland, Virginia, and Texas.
- Our latest AI state bill tracker chart. We are now tracking 50 state AI bills.
- A comparison and analysis of ten key definitions
New Year, New HIPAA Security Rules Headed Your Way
What better way to welcome the new year than with proposed new HIPAA Security Rules?
As 2024 came to an end, the U.S. Department of Health and Human Services announced new proposed regulations to strengthen cybersecurity and protection measures for ePHI. If adopted, this would be the first update to the Security Rule since 2013.
Developing Resilient Cybersecurity Strategies for Businesses
@media screen and (max-width: 1023px){section[data-id=”block_4dbfb7893996094f0e36d3906b7449c7″]{ }}@media screen and (min-width: 1024px) and (max-width: 1365px){section[data-id=”block_4dbfb7893996094f0e36d3906b7449c7″]{ }}@media screen and (min-width: 1366px){section[data-id=”block_4dbfb7893996094f0e36d3906b7449c7″]{ }}
Shay Colson is a Co-founder and Managing Partner at Intentional Cybersecurity, a risk assessment and strategic advisory firm. After spending his early career as a security engineer for the US Government, he worked for a global