By Kyle Brasseur2023-07-26T16:30:00
The Securities and Exchange Commission (SEC) on Wednesday finalized its controversial rule requiring public companies to disclose the nature, scope, timing, and impact of cybersecurity incidents deemed to be material within four business days.
The rule, proposed in March 2022, has received significant attention in the past year for the relatively short timeline it provides businesses to grasp the extent of a cybersecurity incident such as a data breach. Also short will be its compliance date, as large companies as soon as December could be required to begin making the new disclosures.
Smaller reporting companies will receive an additional 180 days to comply.
2023-12-13T18:04:00Z By Kyle Brasseur
Companies won’t have an easy path toward earning additional time from the Department of Justice regarding the disclosure of a material cybersecurity incident to the Securities and Exchange Commission as required under a new rule.
2023-10-16T21:16:00Z By Jeff Dale
Software company Blackbaud agreed to pay $49.5 million in a multistate settlement addressing charges related to a 2020 cyberattack that exposed the personal data of approximately 13,000 consumers.
2023-08-04T18:01:00Z By Adrianne Appel
Covington & Burling is leaving open the possibility of appealing a recent federal court order requiring the law firm to provide the names of hacked clients to the Securities and Exchange Commission.
2025-07-30T20:01:00Z By Ruth Prickett
The U.K. Employment Rights Bill is expected to pass into law this year and will affect millions of workers. Compliance managers are advised to hone their understanding of HR and equality issues in preparation.
2025-07-30T15:56:00Z By Adrianne Appel
The U.S. Environmental Protection Agency has placed a decades-old rule that limits air pollution from cars and trucks on the chopping block, potentially endangering the Clean Air Act.
2025-07-28T17:50:00Z By Ruth Prickett
As of July 22, U.K. companies hiring foreign nationals on skilled worker visas face higher salary and qualification requirements. Over 100 jobs were also removed from the list of roles eligible for overseas recruitment. Compliance managers should ensure policies are updated to reflect the changes.
Site powered by Webvision Cloud