The EU Digital Operational Resilience Act (DORA) takes effect Jan. 17, 2025, and will impact EU financial institutions and their providers of technology-related services (ICT Third Party Service Providers). This webinar will provide a practical overview of the obligations that will apply to both in-scope financial institutions and ICT Third Party Service Providers and explore current
On Nov. 9, 2022, the New York Department of Financial Services (NYDFS) issued a proposed second amendment to its 2017 cybersecurity regulation for financial service companies.[1] In July 2022, NYDFS issued a draft version of the changes, but the current amendment has significant changes. Most of the proposed changes will take effect 180 days
On Aug. 11, 2022, the U.S. Consumer Financial Protection Bureau issued guidance indicating that financial institutions and service providers that fail to adopt sufficient data security measures to protect consumer financial data may violate the Consumer Financial Protection Act provision prohibiting unfair acts and practices.
Join us as we discuss significant financial services cases and trends from 2021 and risks and issues for companies to watch for in 2022, including movements in mass arbitrations and class actions. We will also share thoughts on how to narrow or eliminate these risks going forward.
Wednesday, Feb. 2, 2022
12-1 p.m. EST
Beginning in April 2022, banking organizations and bank service providers will be subject to the shortest regulatory breach notification reporting time frame of any law to date – 36 hours.
On Oct. 27, 2021, the Federal Trade Commission (FTC) amended its Standards for Safeguarding Customer Information (the “Safeguards Rule”), promulgated under the Gramm-Leach-Bliley Act (GLBA).
|
This GT Alert covers the following: |
|
The Gramm–Leach–Bliley Act (GLBA) and its implementing regulations impose privacy requirements when financial institutions collect “nonpublic personal information about individuals who obtain financial products or services primarily for personal, family, or household purposes.”[1] GLBA does not apply, however, when a financial institution collects information about individuals “who obtain financial products or services for business,