Banks, credit card companies and other financial mainstays will be required to comply with new data privacy and retail account portability regulations under a sweeping rule issued Tuesday by the Consumer Financial Protection Bureau.
Regulatory Policy
DOJ proposes rule that would block sale of Americans’ personal data to Chinese, Russian firms
The Department of Justice (DOJ) has proposed a new rule that would regulate the use of Americans’ personal information by foreign companies and foreign persons in six “countries of concern,” prohibiting and restricting the sale of data to thwart the use of data for cyber-enabled activities, espionage, coercion, influence and blackmail.
The notice of proposed rulemaking (NPRM), issued Monday, designated six countries of concern: China (including Hong Kong and Macau), Cuba, Iran, North Korea, Russia, and Venezuela.
Keys to a successful GenAI use policy: Clear roles, training, vendor management
For all the hype surrounding generative artificial intelligence, the technology has been met with a healthy skepticism in the compliance community. Compliance practitioners want to know: Is it safe? Can it be deployed ethically? Are the risks greater than the rewards? And what should an AI acceptable use policy contain?
NYDFS expects banks, firms to cut risks posed by AI, according to new guidance
New York financial institutions are expected to address cybersecurity risks posed by artificial intelligence, and new guidance from the New York Department of Financial Services is aimed at helping firms do just that.
Pace of innovation will make EU AI Act hard to enforce, experts say
Concerns about how robustly European member states may enforce the EU AI Act, which took effect on Aug. 1, are divided between if regulators will take a “light touch” approach or a sledgehammer for noncompliance. One thing’s for sure, the pace of AI innovation will make enforcement very difficult.
FTC final ‘Click to Cancel’ Rule requires disclosure of material facts before enrollments
Tthe Federal Trade Commission, after years of public comments and changes, released a final “Click to Cancel” Rule, which requires a customer’s express consent before they can be charged and prohibits practices that make it difficult for a customer–whether a family or another business–to cancel.
DOJ steps up enforcement approach against AI-powered cybercrime
The Criminal Division of the Department of Justice plans to heighten its focus on cybercrime, according to division head Nicole Argentieri.
Chinese steel, artificial sweetener from Xinjiang now banned under UFLPA
Steel and an artificial sweetener made by two Chinese companies using forced labor have been banned from entering the U.S. under the Uyghur Forced Labor Prevention Act.
Are the qui tam provisions of the False Claims Act constitutional? A Florida judge just said no
A federal court in Florida has lashed out at federal whistleblower programs by dismissing a mundane False Claims Act case against a medical practice on the grounds that the qui tam provisions of the FCA are unconstitutional.
AI misuse could lead to sanctions from multiple regulators, experts warn
The proliferation of AI, as well as the promised business cases promoting its use, has led companies around the world to quickly invest in the technology. Executives hope these AI tools will improve efficiencies, reduce costs, and help them stay competitive. But it could lead to just the opposite.


