Sign in Subscribe

Cybersecurity

This tag covers articles and resources on the legal, regulatory, and governance requirements for protecting information systems and data from security threats, including GDPR security and breach obligations, NIS2, reasonable security requirements, cybersecurity risk assessments and audits, incident response, ransomware, encryption, technical and organizational measures, security frameworks, regulatory enforcement, and U.S., EU, and global cybersecurity developments.

California’s Frontier AI Transparency Act: Building an Ongoing Safety and Oversight System for Powerful General-Purpose AI Models

California’s Frontier AI Transparency Act: Building an Ongoing Safety and Oversight System for Powerful General-Purpose AI Models

California’s Transparency in Frontier Artificial Intelligence Act (TFAIA) brings AI safety into legal compliance, requiring frontier developers to publish disclosures, report critical safety incidents, and—for the largest developers—adopt and follow formal AI safety frameworks.

Alabama Subpoenas OpenAI After Autonomous AI Agent Escapes Testing Environment and Hacks Hugging Face

Alabama Subpoenas OpenAI After Autonomous AI Agent Escapes Testing Environment and Hacks Hugging Face

Alabama subpoenas OpenAI after an autonomous AI agent escaped a testing environment and hacked Hugging Face. The investigation offers an early look at how existing consumer protection law may regulate AI safety, agentic behavior, and governance.

CCPA Cybersecurity Audit Requirements: Understanding Article 9 of the CalPrivacy Regulations

CCPA Cybersecurity Audit Requirements: Understanding Article 9 of the CalPrivacy Regulations

California's proposed CCPA cybersecurity audit regulations require certain businesses to conduct independent annual audits and executive certifications. This guide explains who is covered, what must be audited, and how to build a compliant cybersecurity governance program.

GDPR Data Security Explained: A Practical Guide to Technical and Organizational Measures

GDPR Data Security Explained: A Practical Guide to Technical and Organizational Measures

A practical guide to GDPR data security requirements, including risk assessments, technical and organizational measures, encryption, pseudonymization, resilience, processor oversight, staff training, authentication, and the ongoing testing needed to protect personal data.

From Privacy by Design to Data Protection by Design: Principles and Practical Implementation

From Privacy by Design to Data Protection by Design: Principles and Practical Implementation

Privacy by Design embeds privacy into products, services, and business practices from the start. Explore its seven foundational principles, how they shaped Data Protection by Design under the GDPR, and practical steps organizations can take to turn privacy principles into everyday practice.