Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Joseph Hold
Executive Order N-5-26: AI Certification Standards
On March 30, 2026, California Governor Gavin Newsom issued Executive Order N-5-26 (the “Order”), directing California state agencies to create new artificial intelligence1 (AI) vendor certification standards, reshape the state’s procurement process for AI technologies and build out the state’s AI governance infrastructure.
New FTC Final Rule Changes COPPA Obligations For Online Services Collecting Data From Children
AG Akin Gump Strauss Hauer & Feld LLP More Akin is a law firm focused on providing extraordinary client service, a rewarding environment for our diverse workforce and exceptional legal representation irrespective of ability to pay. The deep transactional, litigation, regulatory and policy experience we bring to client engagements helps us craft innovative, effective solutions and strategies.
New FTC Final Rule Changes COPPA Obligations for Online Services Collecting Data from Children | JD Supra
On January 16, 2025, the Federal Trade Commission (FTC) issued a Final Rule updating the Children’s Online Privacy Protection (COPPA) Rule, significantly expanding compliance obligations for online services that collect, use, or disclose personal information from children under 13.1 The amendments impose new restrictions on targeted advertising, add data security requirements, refine parental consent mechanisms, and introduce additional compliance measures.
New FTC Final Rule Changes COPPA Obligations for Online Services Collecting Data from Children
On January 16, 2025, the Federal Trade Commission (FTC) issued a Final Rule updating the Children’s Online Privacy Protection (COPPA) Rule, significantly expanding compliance obligations for online services that collect, use, or disclose personal information from children under 13.1 The amendments impose new restrictions on targeted advertising, add data security requirements, refine parental consent mechanisms, and introduce additional compliance measures.
Security Requirements And Compliance Obligations In DOJ's Final Rule On Data Transactions
AG Akin Gump Strauss Hauer & Feld LLP More Akin is a law firm focused on providing extraordinary client service, a rewarding environment for our diverse workforce and exceptional legal representation irrespective of ability to pay. The deep transactional, litigation, regulatory and policy experience we bring to client engagements helps us craft innovative, effective solutions and strategies.
DOJ Regulations Will Restrict Data Transactions To Address National Security Concerns
AG Akin Gump Strauss Hauer & Feld LLP More Akin is a law firm focused on providing extraordinary client service, a rewarding environment for our diverse workforce and exceptional legal representation irrespective of ability to pay. The deep transactional, litigation, regulatory and policy experience we bring to client engagements helps us craft innovative, effective solutions and strategies.
DOJ Regulations Will Restrict Data Transactions to Address National Security Concerns
Key Takeaways On January 8, 2025, the DOJ published a final rule prohibiting and restricting certain transactions that could allow persons from countries of concern, such as China, access to bulk sensitive personal data of U.S. citizens or to U.S. government-related data (regardless of volume).
Former President Biden's Executive Order To Strengthen U.S. Cybersecurity And Consumer Trust
On January 17, 2025, days before the inauguration, former President Joe Biden issued an executive order titled Strengthening and Promoting Innovation in the Nation's Cybersecurity (EO 14144). Building on previous efforts, including Executive Order 14028, this directive seeks to bolster cybersecurity across federal systems, supply chains and critical infrastructure from adversarial nations, particularly from the People's Republic of China (PRC).
Former President Biden's Executive Order to Strengthen U.S. Cybersecurity and Consumer Trust | JD Supra
[co-author: Evan Sarnor] On January 17, 2025, days before the inauguration, former President Joe Biden issued an executive order titled Strengthening and Promoting Innovation in the Nation's Cybersecurity (EO 14144). Building on previous efforts, including Executive Order 14028, this directive seeks to bolster cybersecurity across federal systems, supply chains and critical infrastructure from adversarial nations, particularly from the People’s Republic of China (PRC).
CPPA Opens Public Comment Period For Proposed AI Regulations
The California Privacy Protection Agency (CPPA) announced the formal public comment period for its latest proposed rulemaking package, which includes updates to existing regulations and introduces new guidelines for automated decision-making technology (ADMT), cybersecurity audits, risk assessments and insurance companies. Members of the public have until January 14, 2025, to submit comments.
CPPA Opens Public Comment Period for Proposed AI Regulations | JD Supra
The California Privacy Protection Agency (CPPA) announced the formal public comment period for its latest proposed rulemaking package, which includes updates to existing regulations and introduces new guidelines for automated decision-making technology (ADMT), cybersecurity audits, risk assessments and insurance companies. Members of the public have until January 14, 2025, to submit comments.
New FTC Final Rule Changes COPPA Obligations for Online Services Collecting Data from Children
By: Joseph Hold, Marshall L. Baker, Natasha G. Kohne, Oluwaremilekun O.
CPPA Opens Public Comment Period for Proposed AI Regulations
Data Dive The European Union’s AI Office published the inaugural General-Purpose AI Code of Practice on November 14, 2024. The Code is intended to assist providers of AI models in their preparations for compliance with the forthcoming EU AI Act, to be enforced from August 2, 2025. The Code is designed to be both forward-thinking and globally applicable, addressing the areas of transparency, risk evaluation, technical safeguards and governance.
Cybersecurity & Data Privacy Issues in Fund Finance | JD Supra
During the course of any lending transaction, lenders will conduct a due diligence review of the borrower, including reviewing any relevant “know-your-customer” information. In the context of a fund finance transaction, this due diligence is likely to include a review of fund organizational documents, subscription agreements and side letters, if any, from the fund’s investors.
Cybersecurity & Data Privacy Issues in Fund Finance
During the course of any lending transaction, lenders will conduct a due diligence review of the borrower, including reviewing any relevant “know-your-customer” information. In the context of a fund finance transaction, this due diligence is likely to include a review of fund organizational documents, subscription agreements and side letters, if any, from the fund’s investors.
Autonomous Akin Update - August 2024 | JD Supra
October 1, 2024 Christian Davis, Joseph Hold, Hyongsoon Kim, Susan Lent, Nicole McFarland, Rubén Muñoz, Jennifer Richter, Sharanya Sriram Akin Gump Strauss Hauer & Feld LLP + Follow x Following x Following - Unfollow Contact To embed, copy and paste the code into your website or blog: Our newsletter reflects the focus of Akin’s cross-practice autonomous systems and advanced mobility team on developments in the regulatory, policy, trade, intellectual property, and cybersecurity and privacy...
Autonomous Akin Update - July 2024 | JD Supra
August 16, 2024 Christian Davis, Joseph Hold, Hyongsoon Kim, Susan Lent, Nicole McFarland, Rubén Muñoz, Jennifer Richter, Sharanya Sriram Akin Gump Strauss Hauer & Feld LLP + Follow x Following x Following - Unfollow Contact To embed, copy and paste the code into your website or blog: Our newsletter reflects the focus of Akin’s cross-practice autonomous systems and advanced mobility team on developments in the regulatory, policy, trade, intellectual property, and cybersecurity and privacy...
SEC Cyber Enforcement Continues: More Scrutiny of Internal Controls
On June 18, 2024, the United States Securities and Exchange Commission (SEC) announced a settlement with R.R. Donnelley & Sons Company (RRD) for alleged internal control and disclosure failures following a ransomware attack in 2021.
New Cybersecurity Controls for Government Contractors: NIST Revises SP 800-171 | JD Supra
In May, the National Institute of Standards and Technology (NIST) issued updated recommendations for security controls for controlled unclassified information (CUI) that is processed, stored or transmitted by nonfederal organizations using nonfederal systems, (NIST Special Publication 800-171 (SP 800-171), Revision 3).
Akin Intelligence - April/May 2024
|
Having trouble reading this email? View it in your browser April-May 2024 Subscribe | Share this Welcome to the April-May edition of Akin Intelligence. This edition is a double header, covering both months as we prepare for the launch of our new AI Hub—a one-stop resource for AI coverage that will launch soon. Starting next month, each newsletter will cover the events of a single month and will be published early the following month.
By Shiva Aminian, Nathan Brown, Desiree E. Busching, Cono Carrano, Davina Garrod, Jingli Jiang, Jaelyn Edwards Judelson, Michael Kahn, Natasha Kohne, Ed Pagano, Hans Christopher Rickhoff, Corey Roush, David Vondle, Ryan Thompson Verified, Lamar Smith, Reggie Babin, Jenny Arlington, Ryan Dowell, Marshall L. Baker, Jan David Walter, Megan R. Mahoney, Jaylia Yan, Omar Ahmed Farid, Taylor Daly, Joseph Hold
|
Lexology
Verified
New Cybersecurity Controls for Government Contractors: NIST Revises SP 800-171
In May, the National Institute of Standards and Technology (NIST) issued updated recommendations for security controls for controlled unclassified information (CUI) that is processed, stored or transmitted by nonfederal organizations using nonfederal systems, (NIST Special Publication 800-171 (SP 800-171), Revision 3).
Kentucky Data Protection Act: What Businesses Need To Know
AG Akin Gump Strauss Hauer & Feld LLP More Akin is a law firm focused on providing extraordinary client service, a rewarding environment for our diverse workforce and exceptional legal representation irrespective of ability to pay. The deep transactional, litigation, regulatory and policy experience we bring to client engagements helps us craft innovative, effective solutions and strategies.
Kentucky Data Protection Act: What Businesses Need to Know | JD Supra
On April 4, 2024, Kentucky became the fifteenth state to enact a comprehensive data privacy law, with Governor Andy Beshear signing the Kentucky Consumer Data Protection Act (KCDPA) into law. The Kentucky law will go into effect on January 1, 2026. This makes Kentucky the third state in 2024 to enact such a law, following New Jersey and New Hampshire.
Colorado Enacts Groundbreaking AI Consumer Protection Legislation | JD Supra
June 3, 2024 Ryan Dowell, Joseph Hold, Natasha Kohne, Rachel Claire Kurzweil, Michelle Reed Akin Gump Strauss Hauer & Feld LLP + Follow x Following x Following - Unfollow Contact To embed, copy and paste the code into your website or blog: Key Points Colorado's new Al law creates new obligations for developers and deployers of high-risk artificial intelligence (Al) systems.
Kentucky Data Protection Act: What Businesses Need to Know
By: Natasha G. Kohne, Michelle A. Reed, Rachel Claire Kurzweil, Joseph Hold On April 4, 2024, Kentucky became the fifteenth state to enact a comprehensive data privacy law, with Governor Andy Beshear signing the Kentucky Consumer Data Protection Act (KCDPA) into law. The Kentucky law will go into effect on January 1, 2026. This makes Kentucky the third state in 2024 to enact such a law, following New Jersey and New Hampshire.
Colorado Enacts Groundbreaking AI Consumer Protection Legislation
Key Points Colorado's new Al law creates new obligations for developers and deployers of high-risk artificial intelligence (Al) systems. Similar to the EU Al Act, the law is risk-based and defines a "high-risk" Al system as one making, or a substantial factor in making a consequential decision in specific categories. Developers and deployers or high-risk Al systems are required to use reasonable care, including impact assessments, to avoid discrimination.
Kentucky Data Protection Act: What Businesses Need to Know
On April 4, 2024, Kentucky became the fifteenth state to enact a comprehensive data privacy law, with Governor Andy Beshear signing the Kentucky Consumer Data Protection Act (KCDPA) into law. The Kentucky law will go into effect on January 1, 2026. This makes Kentucky the third state in 2024 to enact such a law, following New Jersey and New Hampshire.
Colorado Passes New Watershed AI Consumer Protection Bill | JD Supra
May 28, 2024 Ryan Dowell, Joseph Hold, Natasha Kohne, Rachel Claire Kurzweil, Michelle Reed Akin Gump Strauss Hauer & Feld LLP + Follow x Following x Following - Unfollow Contact To embed, copy and paste the code into your website or blog: Key Points Colorado’s new AI law creates new obligations for developers and deployers of high-risk artificial intelligence (AI) systems.
Colorado Passes New Watershed AI Consumer Protection Bill
Key Points Colorado’s new AI law creates new obligations for developers and deployers of high-risk artificial intelligence (AI) systems. Similar to the EU AI Act, the law is risk-based and defines a “high-risk” AI system as one making, or a substantial factor in making a consequential decision in specific categories. Developers and deployers or high-risk AI systems are required to use reasonable care, including impact assessments, to avoid discrimination.
Delaware Data Protection Act: What Businesses Need To Know
AG Akin Gump Strauss Hauer & Feld LLP More Akin is a law firm focused on providing extraordinary client service, a rewarding environment for our diverse workforce and exceptional legal representation irrespective of ability to pay. The deep transactional, litigation, regulatory and policy experience we bring to client engagements helps us craft innovative, effective solutions and strategies.
Delaware Data Protection Act: What Businesses Need to Know | JD Supra
In September 2023, Delaware became the seventh state in 2023 to enact comprehensive privacy law with the Delaware Personal Data Privacy Act (DPDPA), joining Indiana, Iowa, Montana, Oregon, Tennessee and Texas. The DPDPA will go into effect on January 1, 2025. Key Provisions Controller Requirements – obligations for controllers include: data minimization, data security, opt in consent for sensitive data, nondiscrimination, privacy notices, agreements with processors and data protection assessments.
Autonomous Akin Update - April 2024 | JD Supra
Our newsletter reflects the focus of Akin’s cross-practice autonomous systems and advanced mobility team on developments in the regulatory, policy, trade, intellectual property, and cybersecurity and privacy spaces. Autonomous Akin brings you the latest news and developments so that you can keep a pulse on what is happening in government and industry that is impactful for your business. Please see full publication below for more information.
Delaware Data Protection Act: What Businesses Need to Know
In September 2023, Delaware became the seventh state in 2023 to enact comprehensive privacy law with the Delaware Personal Data Privacy Act (DPDPA), joining Indiana, Iowa, Montana, Oregon, Tennessee and Texas. The DPDPA will go into effect on January 1, 2025. Key Provisions Controller Requirements – obligations for controllers include: data minimization, data security, opt in consent for sensitive data, nondiscrimination, privacy notices, agreements with processors and data protection assessments.
Delaware Data Protection Act: What Businesses Need to Know
By: Natasha G. Kohne, Michelle A. Reed, Rachel Claire Kurzweil, Joseph Hold In September 2023, Delaware became the seventh state in 2023 to enact comprehensive privacy law with the Delaware Personal Data Privacy Act (DPDPA), joining Indiana, Iowa, Montana, Oregon, Tennessee and Texas. The DPDPA will go into effect on January 1, 2025.
New CISA Cybersecurity Incident Reporting Requirements Proposed For Critical Infrastructure Companies
On April 4, 2024, the Department of Homeland Security's (DHS) Cybersecurity and Infrastructure Security Agency (CISA) officially published its Notice of Proposed Rulemaking (NPRM) detailing significant new cybersecurity reporting requirements. If adopted, this proposed rule would require companies in critical infrastructure sectors to report on certain cybersecurity incidents within tight timelines: 72 hours for "substantial cybersecurity incidents," and 24 hours for ransomware payments.
New CISA Cybersecurity Incident Reporting Requirements Proposed for Critical Infrastructure Companies | JD Supra
On April 4, 2024, the Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA) officially published its Notice of Proposed Rulemaking (NPRM) detailing significant new cybersecurity reporting requirements. If adopted, this proposed rule would require companies in critical infrastructure sectors to report on certain cybersecurity incidents within tight timelines: 72 hours for “substantial cybersecurity incidents,” and 24 hours for ransomware payments.
New CISA Cybersecurity Incident Reporting Requirements Proposed for Critical Infrastructure Companies
On April 4, 2024, the Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA) officially published its Notice of Proposed Rulemaking (NPRM) detailing significant new cybersecurity reporting requirements. If adopted, this proposed rule would require companies in critical infrastructure sectors to report on certain cybersecurity incidents within tight timelines: 72 hours for “substantial cybersecurity incidents,” and 24 hours for ransomware payments.
Many More Defense Contractors Now Eligible for DoD Cyberthreat Info-Sharing Program | JD Supra
On March 12, 2024, the Department of Defense (DoD) finalized a rule to open its Defense Industrial Base (DIB) Cybersecurity (CS) Program to all defense contractors who own or operate an unclassified information system that processes, stores or transmits covered defense information.[1]This will allow said contractors to benefit from the DIB CS Program bilateral information sharing arrangement to keep informed about impending cyberthreats. The new rule takes effect April 11, 2024.
New CISA Cybersecurity Incident Reporting Requirements Proposed for Critical Infrastructure Companies
By: Natasha G. Kohne, Michelle A. Reed, Joseph Hold On April 4, 2024, the Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA) officially published its Notice of Proposed Rulemaking (NPRM) detailing significant new cybersecurity reporting requirements.
Many More Defense Contractors Now Eligible for DoD Cyberthreat Info-Sharing Program
On March 12, 2024, the Department of Defense (DoD) finalized a rule to open its Defense Industrial Base (DIB) Cybersecurity (CS) Program to all defense contractors who own or operate an unclassified information system that processes, stores or transmits covered defense information.[1]This will allow said contractors to benefit from the DIB CS Program bilateral information sharing arrangement to keep informed about impending cyberthreats. The new rule takes effect April 11, 2024.
Autonomous Akin Update - February 2024 (Part 2) | JD Supra
Our newsletter reflects the focus of Akin’s cross-practice autonomous systems and advanced mobility team on developments in the regulatory, policy, trade, intellectual property, and cybersecurity and privacy spaces. Autonomous Akin brings you the latest news and developments so that you can keep a pulse on what is happening in government and industry that is impactful for your business. Please see full publication below for more information.
California Court Of Appeals Rules CPPA Can Start Enforcing Regulations - Privacy Protection - United States
On February 9, 2024, California's Third District Court of Appeals ruled that the California Privacy Protection Agency (CPPA) may begin enforcing its finalized data privacy regulations immediately, overturning the lower court's prior ruling that delayed enforcement. The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), tasks the CPPA with promulgating regulations by July 1, 2022, and permits the CPPA to enforce such regulations beginning July 1, 2023.
FTC Proposes Updates To COPPA Rule
On January 18, 2024, the Federal Trade Commission (FTC) discussed its long-anticipated proposed changes for the Children's Online Privacy Protection Rule (COPPA) in an open meeting.
New Jersey Data Protection Act: What Businesses Need To Know
On January 16, 2024, New Jersey became the first state to enact a comprehensive data privacy law in the new year, with Gov. Phil Murphy (D-NJ) signing the New Jersey Privacy Act (NJPA) (SB 332) into law. The New Jersey law will go into effect on January 15, 2025.
Autonomous Akin Update - February 2024 | JD Supra
February 21, 2024 Christian Davis, Alan Martin Hayes, Joseph Hold, Hyongsoon Kim, Susan Lent, Nicole McFarland, Rubén Muñoz, Jennifer Richter, Sharanya Sriram Akin Gump Strauss Hauer & Feld LLP + Follow x Following x Following - Unfollow Contact To embed, copy and paste the code into your website or blog: Our newsletter reflects the focus of Akin’s cross-practice autonomous systems and advanced mobility team on developments in the regulatory, policy, trade, intellectual property, and...
California Court of Appeals Rules CPPA Can Start Enforcing Regulations | JD Supra
On February 9, 2024, California’s Third District Court of Appeals ruled that the California Privacy Protection Agency (CPPA) may begin enforcing its finalized data privacy regulations immediately, overturning the lower court’s prior ruling that delayed enforcement. The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), tasks the CPPA with promulgating regulations by July 1, 2022, and permits the CPPA to enforce such regulations beginning July 1, 2023.
California Court of Appeals Rules CPPA Can Start Enforcing Regulations
By: Natasha G. Kohne, Michelle A. Reed, Rachel Claire Kurzweil, Joseph Hold On February 9, 2024, California’s Third District Court of Appeals ruled that the California Privacy Protection Agency (CPPA) may begin enforcing its finalized data privacy regulations immediately, overturning the lower court’s prior ruling that delayed enforcement.
New Jersey Data Protection Act: What Businesses Need to Know | JD Supra
On January 16, 2024, New Jersey became the first state to enact a comprehensive data privacy law in the new year, with Gov. Phil Murphy (D-NJ) signing the New Jersey Privacy Act (NJPA) (SB 332) into law. The New Jersey law will go into effect on January 15, 2025.
FTC Proposes Updates to COPPA Rule | JD Supra
On January 18, 2024, the Federal Trade Commission (FTC) discussed its long-anticipated proposed changes for the Children’s Online Privacy Protection Rule (COPPA) in an open meeting.
New Jersey Data Protection Act: What Businesses Need to Know
Jump to By: Natasha G. Kohne, Michelle A. Reed, Rachel Claire Kurzweil, Joseph Hold On January 16, 2024, New Jersey became the first state to enact a comprehensive data privacy law in the new year, with Gov. Phil Murphy (D-NJ) signing the New Jersey Privacy Act (NJPA) (SB 332) into law. The New Jersey law will go into effect on January 15, 2025.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Joseph
Contact Joseph, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack