Insights & Publications
© 2018 Debevoise & Plimpton LLP
NY Cybersecurity Bill Shows “Reasonable Security” Standard Gathering Force
7 November 2017
View Client Update
New York Attorney General Eric Schneiderman has announced a proposal to broaden New York’s breach disclosure requirements and require that all businesses, breached or not, adopt “reasonable” cybersecurity measures.
The proposal is part of a trend, both in the U.S. and globally, towards requiring that businesses have “reasonable security” in place, including dedicated internal data security programs, risk assessments, and regularly tested technical and physical safeguards.
This new proposal may not become law, but it still matters. The New York AG regularly brings enforcement actions, and his proposal closely resembles requirements advanced by other states and federal agencies.
Cybersecurity & Data Privacy
White Collar & Regulatory Defense
Christopher S. Ford
European Funds Comment: Parental liability in competition law: Flawed European jurisprudence?
EU Anti-Money Laundering Developments: Fifth Directive Published and Sixth Directive Imminent
CFTC Issues Advisory on Virtual Currency Derivative Product Listings
U.S. Sanctions and AML Measures Target Human Rights Abuses and Corruption
UK Modern Slavery Act Transparency Statement
Debevoise Women's Review