Key takeaways

• The holiday season saw a flurry of important cybersecurity and privacy law developments.
• The New York Department of Financial Services updated its draft cybersecurity regulation; FINRA imposed a hefty fine on a dozen firms due to allegedly lax cybersecurity; the FTC announced two significant settlements, one in the privacy space and another, reached in cooperation with state and international regulators, in the cybersecurity space; China released new proposed cyber and privacy guidelines; and the Article 29 Working Party released new guidance regarding the soon-to-be-effective General Data Protection Regulation.