Inside Cybersecurity | Leading Industry Lawyer Identifies Controversial Gap around Enforcement in NIST’s Privacy Framework Draft

The Securities and Exchange Commission’s cybersecurity-related case against SolarWinds and its CISO was largely dismissed, but a securities fraud claim against the CISO lives on. Our Securities Litigation, Privacy, Cyber & Data Strategy, and Securities teams break down the court’s reasoning.

Our Intellectual Property Group discusses the potential regulatory implications of the Biden Administration’s National Cybersecurity Strategy and the important open questions that remain.

Peter Swire is quoted on a draft policy framework issued by the National Institute of Standards and Technology for improving critical infrastructure cybersecurity.

Our Health Care and Privacy, Cyber & Data Strategy Groups cover an upcoming proposed rule from U.S. Health and Human Services (HHS) that would formalize cybersecurity requirements and allow the Office for Civil Rights (OCR) to expand enforcement.