During these challenging times, Severson & Werson remains open and in full operation, consistent with the firm’s previously established contingency planning. While many of our attorneys and staff will be working remotely, as a firm, we continue in full operation. We are here to help, as always.
On March 9, the SEC proposed Cybersecurity rules for public companies that if adopted, would impose substantial new reporting obligations for material cybersecurity incidents and cybersecurity risk management, strategy, and governance. A copy of the proposed Rules can be found at https://www.sec.gov/rules/proposed/2022/33-11038.pdf Read More
The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) issued an advisory yesterday, alerting companies who engage with victims of ransomware attacks of potential sanctions risks for facilitating ransomware payments. This advisory highlights OFAC’s designations of malicious cyber actors and those who facilitate ransomware transactions under its cyber-related sanctions program. It identifies U.S. government resources for reporting… Read More
The CCPA went live on January 1, 2020, creating a cause of action and potential liability of between $100 to $750 per person for a data breach deriving from a business' failure to maintain reasonable policies and procedures. Unfortunately, the CCPA does not define the term "reasonable". While compliance lawyers and consultants properly have been advising their clients to shore… Read More
