Tag:

compliance

House Moves to Bolster Supply Chain and Network Security

On October 20, the House of Representatives passed several bills directed at the Department of Homeland Security (“DHS”) and the Department of Commerce (“DOC”) that may impact network security compliance measures affecting U.S. businesses.  These bills take aim at much of the software and network technology used by companies within the supply chain to ensure that security is not dismissed in the effort to cut costs and to maintain healthy competition between network communication equipment vendors.

Compliance Spotlight: William Hanning, CISSP, CISO

William Hanning is a Chief Information Security Officer with Groups360 and close to twenty years of Information Security experience. Mr. Hanning has built and managed security programs in multiple industries in organizations of varying sizes, as well as within Fortune 100 companies. Here, he gives insight about the separation between data privacy and cybersecurity, the role of information security teams, and how cybersecurity relates to and supports the work of legal and compliance departments.

NBA Healthcare Fraud Scheme

Krista Solano Associate Editor Loyola University Chicago School of Law, JD 2023 Eighteen former NBA players were charged with defrauding the league’s health and welfare benefit plan. The former players were charged under 8 USC Section 1347, otherwise known as the federal healthcare fraud statute. The fraud scheme submitted $3.9 million in fake claims, for …
Read more

The Pandora Papers and the Bank Secrecy Act

The recent Pandora Papers leak in October 2021 shined the light on the massive and intricate web of offshore accounting that allows for insurmountable amounts of wealth to be hidden throughout the world. One of the most shocking revelations of these Papers was how heavily the United States was implicated in creating and perpetuating this system. As such, legislators have been pressured to find a way to crackdown on this sort of offshore money. One way that they have proposed addressing the problem is by amending the United States’ current criminal financial legislation, the Bank Secrecy Act.

A Potential Strike May Impact Hollywood

The biggest industry strike among Hollywood production workers since World War II may be impending. On October 4, 2021, the International Alliance of Theatrical Stage Employees (IATSE) announced that members overwhelming granted the union’s president the authorization to strike against the Alliance of Motion Picture and Television Producers (AMPTP). The crux of the demands by the union revolves around increasing workers’ quality of life. Average working days consist of fourteen hours or more, with meal breaks often avoided, leaving little to no personal life outside of the industry.

Should The US Implement More Federal Data Privacy Laws

While the United States does have some federal data privacy regulations in place, the most comprehensive regulations exist at the state level with a degree of variation of protection from state to state. Recently, more conversations are being had about whether the United States should implement more federal data privacy laws. Proponents say they would likely use something equivalent to the European Union’s General Data Protection Regulation (GDPR), which focuses on regulating consumer data privacy and protecting consumers from data breaches. This is especially significant because states are taking matters into their own hands by passing state data privacy regulations that all vary slightly, which could become confusing for companies trying to be compliant with more than one.

Professional Sports Leagues and Vaccine Mandates

Following President Biden’s announcement mandating vaccinations for companies with over one hundred employees, major professional sports leagues may be required to ensure compliance with the mandate. This mandate has the potential to have sweeping implications throughout professional sports, from the athletes, to staff and even spectators. The NFL, NBA, and MLB all have high vaccination rates among their players and the staff that works closely with them, since many teams have already mandated that players and those working in “close proximity” to them be vaccinated. However, their back-office staff are less protected, as those employees have yet to be subjected to strict protocols of the rest of the leagues. Despite these high vaccination rates among athletes and certain staff members, the leagues have been reluctant to institute absolute mandates. But that doesn’t mean that athletes don’t still have a responsibility not only to get vaccinated but also encourage others to do so as well.

Security Awareness — Not Just an IT and Compliance Responsibility

Since the start of 2021, cyber-attacks have dominated headlines across every industry. From governments and government organizations, healthcare companies, and banks, to gaming companies and oil pipelines, ransomware has impacted organizations of all types and sizes. The scale and scope of these attacks have continued to grow and have far reaching consequences. Despite current agency attempts to strengthen cybersecurity through regulation, individual users continue to pose a serious threat due to insufficient security education.  

It’s Not Too Early to Start Worrying About Discriminatory Algorithms in Your Code: A Practical Approach to Self-Regulation

There’s no doubt that remote work, brought on by the coronavirus pandemic, will accelerate the digital revolution already underway. Consumers’ growing appetite to conduct their business online, rather than in-person, has fueled the proliferation of digitally accessible products and services. For instance, movie theaters have closed their doors while content streaming services have experienced exponential growth. And while the restaurant industry, as a whole, has suffered, ‘virtual’ kitchens and grocery delivery apps have picked up steam. A critical question that arises from these trends is “what can be done to eliminate biases in the algorithms that drive these digital transactions?”

Updates to Autorenewal Regulations and Enforcement

In the age of online consumerism, many companies utilize automatic renewal programs to deliver their products and services to customers on a recurring basis for a monthly or annual charge. Recently, autorenewal programs have seen an increase in consumer protection through legislation at both the state and federal level along with enforcement actions brought by private plaintiffs, state attorney generals, and the Federal Trade Commission (“FTC”). Organizations that utilize automatic renewal should be aware of the uptick in autorenewal program enforcement and look to strengthen and update their policies where appropriate.