liability
-
Blog
How enterprises are adapting to personal liability rules
With the threat of personal liability for data breaches hanging over CISOs’ heads, organizations are increasingly working to minimize the risk. Recent US and EU legislation has made it possible to hold executives responsible for security breaches, with potential penalties of fines and even imprisonment. A recent survey from edge cloud platform provider Fastly found that 93% of organizations have…
Read More » -
Blog
EU pulls back – for the moment – on privacy and genAI liability compliance regulations – Computerworld
The critical factor is that another, much larger piece of legislation, called simply the EU AI Act, is just about to kick in, and regulators wanted to see how that enforcement went before expanding it. “They want to see how these other pieces of the framework are going to work. There are a lot of moving parts so (delaying) is…
Read More » -
Blog
The EU just shelved its AI liability directive
The European Commission has shelved plans to impose civil liability rules on enterprises using harmful AI systems in a move critics have described as a “strategic mistake”. First proposed in 2022, the AI Liability Directive aimed to overhaul existing rules on harmful AI systems and protect consumers. However, the publication of the Commission’s final work program shows plans to introduce…
Read More » -
Blog
GDPR fines might’ve dipped last year, but don’t get complacent – personal liability risks are rising
The number of GDPR fines issued last year fell by a third compared with 2023 , according to new research, but this doesn’t mean data protection authorities are getting any softer. DLA Piper’s GDPR Fines and Data Breach Survey found that €1.2 billion in penalties was issued during the year, down 33%. This marks the first time the amount has…
Read More » -
Blog
Threat of personal liability has CISOs sweating
CISOs are feeling the pressure over stories of their peers being held personally liable for cybersecurity incidents. In the most notorious example, the US Securities and Exchange Commission (SEC) last year announced that it was filing charges against both SolarWinds and its CISO, Tim Brown, amid allegations of “fraud and internal control failures relating to allegedly known cybersecurity risks and…
Read More »