On December 5, 2024, the U.S. Department of Commerce, Bureau of Industry and Security (“BIS”) issued a final rule (the “Final Rule”) implementing the procedures BIS will follow when reviewing information and communications technology (“ICTS”) transactions that may pose a risk to U.S. national security pursuant to Executive Order (E.O.) 13873.[1]
Latest from Cleary Gottlieb Steen & Hamilton LLP - Page 6
You’re Invited: U.S. Outbound Investment Security Program Webinar on January 7, 2025
The Treasury Department has released its “Final Rule” which will impose on U.S. persons notification requirements and restrictions for transactions involving entities engaged in activities relating to semiconductors and microelectronics, quantum information technologies, and artificial intelligence systems in “countries of concern.” The rule will go into effect on January 2, 2025.…
FCO Finds That Microsoft’s Hiring of Key Inflection Employees and Licensing of Inflection Technology Constitutes a Reportable Concentration, but Declines Jurisdiction Due to Lack of Sufficient Local Nexus
On November 29, 2024, the German Federal Cartel Office (“FCO”) concluded that Microsoft’s hiring of nearly all of Inflection AI, Inc.’s (“Inflection”) employees together with agreements on financing and the use of Inflection’s intellectual property amounted to a “concentration” under German merger control law. However, due to the lack of “substantial domestic operations” at the time of…
You’re Invited: U.S. Outbound Investment Security Program Webinar on December 16, 2024
The Treasury Department has released its “Final Rule” which will impose on U.S. persons notification requirements and restrictions for transactions involving entities engaged in activities relating to semiconductors and microelectronics, quantum information technologies, and artificial intelligence systems in “countries of concern.” The rule will go into effect on January 2, 2025.…
SEC FY 2024 Enforcement Results: Record Dollars But Many Fewer Cases
On November 22, the Securities and Exchange Commission announced its enforcement results for the 2024 fiscal year with a record $8.2 billion in financial remedies.[1] At the same time, a few cases and sweeps comprised the vast bulk of that amount, and the number of cases brought dropped by 26%. In a press…
EU Evaluates Standalone AI Liability Directive
DOJ Antitrust Creates Guidance for Evaluating Antitrust Compliance Programs
On November 14, 2024, the U.S. Department of Justice (“DOJ”) Antitrust Division (the “Division”) released guidance for the Evaluation of Corporate Compliance Programs in Criminal Antitrust Investigations (the “Guidance”). The Guidance will be used by the Division in assessing the adequacy and effectiveness of a company’s antitrust compliance program when making a charging or resolution…
Long-Awaited U.S. Outbound Investment Regime Published, Will Become Effective January 2, 2025
On October 28, 2024, the U.S. Department of the Treasury (“Treasury”) issued a long-awaited Final Rule (the “Final Rule”) implementing the U.S. Outbound Investment Security Program (the “Program”).[1] Under the Program, effective January 2, 2025, U.S. persons will be prohibited from engaging in, or required to notify Treasury regarding, a broad range of transactions…
SEC 2025 Exam Priorities: Private Funds, Cyber, Crypto, and New Rule Compliance
The U.S. Securities and Exchange Commission (“SEC”) Division of Examinations (the “Division”) released its 2025 examination priorities on October 21, 2024 (the “2025 Priorities”). The 2025 Priorities highlight a wide range of topics for entities subject to SEC examinations, particularly investment advisers and broker-dealers. The topics should be very familiar, as they largely continue recent…
New York Department of Financial Services Issues Guidance on Cybersecurity Risks Arising from Artificial Intelligence
Last week, the New York Department of Financial Services (“DFS”) issued guidance addressed to executives and information security personnel of entities regulated by DFS to assist them in understanding and assessing cybersecurity risks associated with the use of artificial intelligence (“AI”), and implementing appropriate controls to mitigate such risks (the “Guidance”).[1] In particular, and…
