Publications

• Debevoise Data Blog: Financial Services Industry Comments on CISA’s Proposed Reporting Obligations for Critical Infrastructure
  10 July 2024
  Debevoise Data Blog
  Erez Liebermann
  ,
  Gabriel A. Kohan
  ,
  H Jacqueline Brehmer
  ,
  Stephanie D. Thomas
  ,
  Jarrett Lewis
  ,
  Melyssa Eigen
  ,
  Joshua A. Goland
  ,
  Annabella M. Waszkiewicz
• NYU Compliance & Enforcement: NIST Releases Most Significant Update to Cybersecurity Framework Since 2014
  25 March 2024
  Compliance & Enforcement
  Avi Gesser
  ,
  Erez Liebermann
  ,
  H Jacqueline Brehmer
  ,
  Annabella M. Waszkiewicz
• Harvard Forum on Corporate Governance: Takeaways from Proposed Changes to the NIST Cybersecurity Framework
  1 April 2023
  Harvard Forum on Corporate Governance
  Avi Gesser
  ,
  Erez Liebermann
  ,
  H Jacqueline Brehmer
  ,
  Stephanie D. Thomas
• CPRA Rulemaking Is Underway - Getting Ahead of Enforcement Risks
  2 August 2022
  Avi Gesser
  ,
  David Sarratt
  ,
  Christopher S. Ford
  ,
  Johanna N. Skrzypczyk
  ,
  H Jacqueline Brehmer
• Compliance & Enforcement: NYDFS Proposes Significant Changes to Its Cybersecurity Rules
  1 August 2022
  Compliance & Enforcement
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Jim Pastore
  ,
  Charu A. Chandrasekhar
  ,
  H Jacqueline Brehmer
  ,
  Mengyi Xu
• NYDFS Proposes Significant Changes to Its Cybersecurity Rules
  1 August 2022
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Jim Pastore
  ,
  Charu A. Chandrasekhar
  ,
  H Jacqueline Brehmer
  ,
  Mengyi Xu
• Cyber Whistleblowers—Eight Lessons from the First False Claims Act Settlements
  21 July 2022
  Avi Gesser
  ,
  Erez Liebermann
  ,
  H Jacqueline Brehmer
• Columbia Blue Sky Blog: Debevoise Discusses New Cyber Incident Reporting for Critical Infrastructure
  23 March 2022
  Columbia Blue Sky Blog
  Luke Dembosky
  ,
  Avi Gesser
  ,
  H Jacqueline Brehmer
  ,
  Stephanie D. Thomas
• Six Key Takeaways from the SEC’s Most Recent Proposed Cybersecurity Rules for Registrants
  14 March 2022
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Matthew E. Kaplan
  ,
  Charu A. Chandrasekhar
  ,
  H Jacqueline Brehmer
  ,
  Rebecca Zipursky
• Harvard Forum on Corporate Governance: Four Takeaways from the SEC’s Proposed Cybersecurity Rules
  7 March 2022
  Harvard Forum on Corporate Governance
  Avi Gesser
  ,
  Charu A. Chandrasekhar
  ,
  Christopher S. Ford
  ,
  H Jacqueline Brehmer
  ,
  Julie M. Riewe
• Four Takeaways from the SEC’s Proposed Cybersecurity Rules
  17 February 2022
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Julie M. Riewe
  ,
  Charu A. Chandrasekhar
  ,
  H Jacqueline Brehmer
  ,
  Christopher S. Ford
• NYU Compliance & Enforcement: CCPA Enforcement Update: California AG Announces a New Enforcement Sweep Targeting Customer Loyalty Programs
  10 February 2022
  NYU Compliance & Enforcement
  David Sarratt
  ,
  H Jacqueline Brehmer
  ,
  Christopher S. Ford
• NYU Compliance & Enforcement: SEC Cybersecurity Update: Chair Gensler Offers Insight into Upcoming Regulation
  3 February 2022
  NYU Compliance & Enforcement
  Avi Gesser
  ,
  Charu A. Chandrasekhar
  ,
  Christopher S. Ford
  ,
  H Jacqueline Brehmer
• CCPA Enforcement Update: California AG Announces a New Enforcement Sweep Targeting Customer Loyalty Programs
  2 February 2022
  David Sarratt
  ,
  H Jacqueline Brehmer
  ,
  Christopher S. Ford
• SEC Cybersecurity Update: Chair Gensler Offers Insight into Upcoming Regulation
  26 January 2022
  Avi Gesser
  ,
  Charu A. Chandrasekhar
  ,
  H Jacqueline Brehmer
  ,
  Christopher S. Ford
• Latin Lawyer – The Guide to Corporate Crisis Management: Data Privacy and Cybersecurity: Crisis Avoidance and Management Strategies
  16 December 2021
  Latin Lawyer – The Guide to Corporate Crisis Management
  Andrew M. Levine
  ,
  Johanna N. Skrzypczyk
  ,
  H Jacqueline Brehmer
  ,
  Michael Bloom
  ,
  Hilary Davidson
  ,
  Mengyi Xu
• CLS Blue Sky Blog: Debevoise & Plimpton Discusses Proposed Cybersecurity Legislation
  29 November 2021
  CLS Blue Sky Blog
  Luke Dembosky
  ,
  Avi Gesser
  ,
  H Jacqueline Brehmer
  ,
  Stephanie D. Thomas
• OFAC and FinCEN Update Ransomware Guidance to Include New Red-Flag Indicators and Additional Sanctions Designations
  10 November 2021
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Satish M. Kini
  ,
  Aseel M. Rabie
  ,
  H Jacqueline Brehmer
  ,
  Andreas Constantine Pavlou
• Six Quick Cybersecurity Takeaways from SEC Speaks 2021
  18 October 2021
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Charu A. Chandrasekhar
  ,
  H Jacqueline Brehmer
• Emerging Cybersecurity Standards for Critical Infrastructure – Lessons from Recent Goals Released by CISA and NIST
  11 October 2021
  Luke Dembosky
  ,
  Avi Gesser
  ,
  H Jacqueline Brehmer
• Compliance & Enforcement: OFAC’s Ransomware Advisory – How Banks Can Reduce Their Sanctions Risk for Client Cyber Ransom Payments (Part II of II)
  5 October 2021
  Compliance & Enforcement
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Satish M. Kini
  ,
  H Jacqueline Brehmer
• OFAC’s Ransomware Advisory Part 2 – How Banks Can Reduce Their Sanctions Risk for Client Cyber Ransom Payments
  5 October 2021
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Satish M. Kini
  ,
  H Jacqueline Brehmer
• Compliance & Enforcement: Improved Cybersecurity Can Mitigate Sanctions Risk, and Other Takeaways from the Latest OFAC Advisory on Ransomware
  24 September 2021
  Compliance & Enforcement
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Satish M. Kini
  ,
  H Jacqueline Brehmer
  ,
  Sarah Quirk Smith
• Improved Cybersecurity Can Mitigate Sanctions Risk and Other Takeaways from the Latest OFAC Advisory on Ransomware
  23 September 2021
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Satish M. Kini
  ,
  H Jacqueline Brehmer
  ,
  Sarah Quirk Smith
• Key Takeaways from the First Year of CCPA Enforcement
  28 July 2021
  Jim Pastore
  ,
  David Sarratt
  ,
  Johanna N. Skrzypczyk
  ,
  H Jacqueline Brehmer
  ,
  Christopher S. Ford
• CLS Blue Sky Blog: Debevoise & Plimpton Discusses New Privacy Legislation in the U.S.: The Patchwork Problem Grows
  26 July 2021
  CLS Blue Sky Blog
  Johanna N. Skrzypczyk
  ,
  Kim T. Le
  ,
  H Jacqueline Brehmer
• Seven Tips for Reducing CCPA Litigation Risks – Lessons from the First 18 Months
  22 June 2021
  Avi Gesser
  ,
  Jim Pastore
  ,
  Johanna N. Skrzypczyk
  ,
  H Jacqueline Brehmer
  ,
  Christopher S. Ford
• CCPA Regulations Submitted to the California Office of Administrative Law for Publication
  4 June 2020
  Jeffrey P. Cunard
  ,
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  H Jacqueline Brehmer
  ,
  Christopher S. Ford
• Proposed Modifications to CCPA Regulations - Top Takeaways
  12 February 2020
  Jeffrey P. Cunard
  ,
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Javier Alvarez-Oviedo
  ,
  H Jacqueline Brehmer
  ,
  Christopher S. Ford
  ,
  Kate Saba
• The Practical Implications of the National Securities Clearing Corporation’s New Cybersecurity Rules
  7 February 2020
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Julie M. Riewe
  ,
  Paul M. Rodel
  ,
  H Jacqueline Brehmer
• SEC’s New Cyber Observations Highlight Operational Resiliency
  4 February 2020
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Robert B. Kaplan
  ,
  Jim Pastore
  ,
  Julie M. Riewe
  ,
  H Jacqueline Brehmer
  ,
  Stephanie Cipolla
  ,
  Christopher S. Ford