As cybersecurity breaches grow more complex and frequent, regulators are increasingly focused on organizational compliance. Organizations such as Crowdstrike report that in 2025, cyberattacks are ...

Upcoming deadline is the first time covered entities must certify their compliance with most of the amendments adopted in 2023 In November 2023, the New York Department of Financial Services (NYDFS) ...

In August, Advocate Health Care Network agreed to pay a $5.55 million settlement with the U.S. Department of Health and Human Services Office for Civil Rights (OCR), for multiple HIPAA violations. In ...

Since Feb. 21, 2024, the U.S. Department of Health and Human Services (HHS) Office of Civil Rights (OCR) has announced 14 monetary penalties/settlements related to cyber incidents with no signs of ...

CISA’s massive rulemaking will create the first US cyber incident and ransomware payment reporting mechanism that promises to radically overhaul the workloads of most cybersecurity professionals. In ...

On December 9, 2025, the California Air Resources Board (CARB) released its proposed regulatory text for the initial regulations implementing ...

The Health Insurance Portability and Accountability Act (HIPAA) protects patient health information and provides individuals with rights to control the use and disclosure of their health information.

Opinion: In response to major data breaches in New York, the state has issued new guidance for companies to follow as a way to improve their relationships and security with third-party cybersecurity ...