Regulation on the Horizon: What You Wish Your Lawyer Had Told You About
summary
Recent enforcement and draft rules change what counts as risk and who can be held liable: the FTC’s Drizly consent decree finds 2.5 million consumers’ data exfiltrated, cites deceptive privacy claims under Section 5 and imposes a 10-year CEO obligation to implement cybersecurity programs at firms handling >25,000 people; the SEC’s new 4-day 8-K rule requires disclosure of material incidents “without unreasonable delay” (30‑day AG national‑security delay possible) while under 20 8‑Ks filed so far; California’s draft audit rule hits firms over 250,000‑consumer threshold or $28M revenue, requires board‑reported audits and a 24‑month compliance runway.
AI-written summary · about
chapters (14)
- 0:00Cybersecurity regulation panel intro
- 1:26Rising cybersecurity regulations
- 2:29FTC Drizly case CEO liability
- 7:52SEC SolarWinds CISO fraud charges
- 9:58CISO concerns over SEC rules
- 17:30SEC incident reporting requirements
- 26:35State AGs vs federal alignment
- 29:24California cybersecurity audit rules
- 35:44California cybersecurity audits concerns
- 37:55CISO vs CDO liability
- 40:10Managing regulatory uncertainty
- 44:27Basic security standards enforcement
- 47:17Global regulatory changes tracking
- 50:30Emerging cybersecurity regulations summary
related talks
36mCybersecurity, Privacy and Data Security from a Business Lawyer's Perspective
42mNew Legal & Regulatory Developments Impacting the IT Professional Community
31mThe 2025 Privacy Regulatory Landscape: US and Europe
42mPreparing for the New Era of Cybersecurity Disclosure
36mPrivacy, Consent and Security Within Modern Applications
25mWhen GDPR and CCPA strike
01h 14mRegulatory choices and privacy consequences
01h 16mSession 1