On 4 November 2019, the UK Government’s Department for Digital, Culture, Media & Sport (“DCMS“) issued the Cyber Security Incentives and Regulation Review 2020: Call for Evidence (the “Review“). The aims of the Review are to: understand the barriers which prevent organisations from improving their cyber security; understand the effectiveness of existing regulations and guidance … Read more
The new Encryption Law, China’s first national law on encryption, was published on 26 October 2019 and will come into force on 1 January 2020. It broadens the current regulatory scope of encryption, liberalises commercial encryption at national-law level and proposes a market-oriented regulatory regime for the commercial encryption industry. Foreign and foreign-invested enterprises are given … Read more
Australia’s Department for Home Affairs (“DHA“) has released a discussion paper on Australia’s 2020 Cyber Security Strategy (“Discussion Paper“), updating the inaugural 2016 Cyber Security Strategy. Read more
Shortly after the release of the communiqué from the most recent ministerial meetings of the ‘Five Countries’ security alliance — Australia, Canada, New Zealand, the UK and the US — at the end of July, we warned that the issue of the use of, and access to, encrypted services and technologies ‘remains front of mind for … Read more
As we previously reported, the EU reached political agreement on the new EU Cybersecurity Act (the “Act“) in March 2019. The Act has now been published in the Official Journal and the majority of its provisions came into effect on 27 June 2019. Read more
On 20 June 2019, the US Senate confirmed Keith Krach as the Under Secretary of State for Economic Growth, Energy, and the Environment. As part of that role, Krach will serve as the permanent Ombudsman for the EU-US Privacy Shield agreement. The EU-US Privacy Shield is a framework that regulates transatlantic exchanges of personal data … Read more
Reflecting recognition of the critical nature of cybersecurity concerns and precautions, the US Department of Defense (“DoD“) has announced that certain cybersecurity protection measures may qualify as costs that defense contractors may claim in contracts. On 3 June 2019 at the Professional Services Council’s Federal Acquisition Conference, Katie Arrington, Special Assistant to the Assistant DoD … Read more
In our last report on the California Consumer Privacy Act (“CCPA“), which expands the rights that California residents have with respect to their personal information, we advised that the state’s Attorney General (“CA AG“) had commenced a series of public forums as it prepares regulations expected to implement the CCPA and establish compliance regimens for … Read more
In April 2019, the US Department of Justice (“DoJ“) published a white paper entitled “Promoting Public Safety, Privacy, and the Rule of Law Around the World: The Purpose and Impact of the CLOUD Act” (the “White Paper“). The White Paper is the DoJ’s first official statement about the Clarifying Lawful Overseas Use of Data Act … Read more
