Publications

• Federal Judicial Conference to Revise Rules of Evidence to Address AI Risks
  20 March 2025
  Avi Gesser
  ,
  Jim Pastore
  ,
  Matt Kelly
  ,
  Jackie Dorward
  ,
  Gabriel A. Kohan
• Debevoise Data Blog: FTC’s Consent Order Against Marriott: Expectations for Reasonable Security
  30 January 2025
  Debevoise Data Blog
  Erez Liebermann
  ,
  Jim Pastore
  ,
  Christopher S. Ford
  ,
  Michael Bloom
  ,
  Mengyi Xu
  ,
  Achutha N. Raman
  ,
  Michelle Shen
• Cyber Whistleblower Leads to DOJ Civil Settlement
  5 November 2024
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Andrew M. Levine
  ,
  Erez Liebermann
  ,
  Jim Pastore
  ,
  Stephanie Cipolla
  ,
  Michelle Shen
• Debevoise Data Blog: Mitigating AI Risks for Customer Service Chatbots
  16 April 2024
  Debevoise Data Blog
  Avi Gesser
  ,
  Jim Pastore
  ,
  Matt Kelly
  ,
  Gabriel A. Kohan
  ,
  Joshua A. Goland
• The Increasing Risks of AI Washing and Securities Fraud Class Actions
  4 April 2024
  Charu A. Chandrasekhar
  ,
  Avi Gesser
  ,
  Maeve O'Connor
  ,
  Jim Pastore
  ,
  Kristin A. Snyder
  ,
  Matt Kelly
  ,
  Gabriel A. Kohan
  ,
  Alexandra N. Mogul
  ,
  Joshua A. Goland
• New York Law Journal: Artificial Intelligence in Class Action Litigation
  8 December 2023
  New York Law Journal
  Jim Pastore
  ,
  Maura Kathleen Monaghan
• CLS Blue Sky Blog: Debevoise Discusses White House’s National Cybersecurity Strategy
  30 March 2023
  CLS Blue Sky Blog
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Jim Pastore
• Risks of Overselling Your AI: The FTC is Watching
  6 March 2023
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Jim Pastore
  ,
  Paul D. Rubin
  ,
  Christopher S. Ford
  ,
  Mengyi Xu
• Practising Law Institute: Privacy Law Answer Book
  23 January 2023
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jyotin Hamid
  ,
  Satish M. Kini
  ,
  Henry Lebowitz
  ,
  Erez Liebermann
  ,
  Maura Kathleen Monaghan
  ,
  David A. O'Neil
  ,
  Jim Pastore
  ,
  David Sarratt
  ,
  Jeffrey P. Cunard
  ,
  Kim T. Le
  ,
  Tricia Bozyk Sherno
  ,
  Johanna N. Skrzypczyk
  ,
  Michael Bloom
  ,
  Fanny Gauthier
  ,
  Hannah R. Levine
  ,
  Linda Lin
  ,
  Kate Saba
  ,
  Noah L. Schwartz
  ,
  Mengyi Xu
• Compliance & Enforcement: NYDFS Proposes Significant Changes to Its Cybersecurity Rules
  1 August 2022
  Compliance & Enforcement
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Jim Pastore
  ,
  Charu A. Chandrasekhar
  ,
  HJ Brehmer
  ,
  Mengyi Xu
• NYDFS Proposes Significant Changes to Its Cybersecurity Rules
  1 August 2022
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Jim Pastore
  ,
  Charu A. Chandrasekhar
  ,
  HJ Brehmer
  ,
  Mengyi Xu
• NYU Compliance & Enforcement Blog: A New Era of Federal Trade Commission (“FTC”) Privacy and Cybersecurity Oversight: Top Ten Things Companies Should Know When Assessing FTC Compliance and Exposure
  26 January 2022
  NYU Compliance & Enforcement Blog
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Ted Hassi
  ,
  Paul D. Rubin
  ,
  Jim Pastore
  ,
  Johanna N. Skrzypczyk
  ,
  Leah Martin
  ,
  Melissa Runsten
  ,
  Christopher S. Ford
• Law360: What Stablecoin Industry Can Expect From Congress In 2022
  25 January 2022
  Law360
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Ted Hassi
  ,
  Paul D. Rubin
  ,
  Jim Pastore
  ,
  Johanna N. Skrzypczyk
  ,
  Leah Martin
  ,
  Melissa Runsten
  ,
  Christopher S. Ford
• A New Era of Federal Trade Commission (“FTC”) Privacy and Cybersecurity Oversight: Top Ten Things Companies Should Know When Assessing FTC Compliance and Exposure
  12 January 2022
  Luke Dembosky
  ,
  Ted Hassi
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Paul D. Rubin
  ,
  Johanna N. Skrzypczyk
  ,
  Christopher S. Ford
  ,
  Leah Martin
  ,
  Melissa Runsten
• Six Quick Cybersecurity Takeaways from SEC Speaks 2021
  18 October 2021
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Charu A. Chandrasekhar
  ,
  HJ Brehmer
  ,
  Matthew C. Rametta
• Columbia Blue Sky Blog: Debevoise & Plimpton on the Latest Round of SEC Cybersecurity Enforcement Actions
  7 September 2021
  Columbia Blue Sky Blog
  Avi Gesser
  ,
  Jim Pastore
  ,
  Mengyi Xu
• China Passes the Personal Information Protection Law
  1 September 2021
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Edwin Northover
  ,
  Jim Pastore
  ,
  Emily Lam
  ,
  Philip Rohlik
  ,
  Johanna N. Skrzypczyk
  ,
  Tingting Wu
• The Latest Round of SEC Cybersecurity Enforcement Actions Targets MFA Deficiencies, Inadequate Policies, and Misleading Breach Notifications
  1 September 2021
  Avi Gesser
  ,
  Jim Pastore
  ,
  Mengyi Xu
• Key Takeaways from the First Year of CCPA Enforcement
  28 July 2021
  Jim Pastore
  ,
  David Sarratt
  ,
  Johanna N. Skrzypczyk
  ,
  HJ Brehmer
  ,
  Christopher S. Ford
• Department of Labor Intensifies Cyber Readiness Inquiries Among Retirement Plan Administrators
  13 July 2021
  Lawrence K. Cagney
  ,
  Avi Gesser
  ,
  Jonathan F. Lewis
  ,
  Jim Pastore
  ,
  Johanna N. Skrzypczyk
• The Supreme Court TransUnion Case: Part 2—What It Means for Efforts to Defeat Class Certification?
  9 July 2021
  Mark P. Goodman
  ,
  Maura Kathleen Monaghan
  ,
  Jim Pastore
  ,
  Jacob W. Stahl
  ,
  Adam Aukland-Peck
  ,
  Benjamin Leb
• Seven Tips for Reducing CCPA Litigation Risks – Lessons from the First 18 Months
  22 June 2021
  Avi Gesser
  ,
  Jim Pastore
  ,
  Johanna N. Skrzypczyk
  ,
  HJ Brehmer
  ,
  Christopher S. Ford
• Effective Access Controls, Timely Breach Notification and Other Takeaways from the Latest NYDFS Cyber Resolution
  15 April 2021
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Johanna N. Skrzypczyk
  ,
  Christopher S. Ford
  ,
  Mengyi Xu
• The SEC’s Cybersecurity Priorities for Registered Investment Advisers—Looking Back to Anticipate the Road Ahead
  11 March 2021
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Tricia Reville
  ,
  Mengyi Xu
• First DFS Resolution Under Its Cyber Rules Highlights the Risks of Inadequate Cyber Investigations
  8 March 2021
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Christopher S. Ford
  ,
  Alexandra N. Mogul
• Compliance & Enforcement: Destruction Emerges as a Powerful Enforcement Measure for AI: FTC Requires Company to Delete Models Trained with Improperly Utilized Consumer Data
  22 January 2021
  Compliance & Enforcement:
  Avi Gesser
  ,
  Jim Pastore
  ,
  Paul D. Rubin
  ,
  Melissa Runsten
• Destruction Emerges as a Powerful Enforcement Measure for AI: FTC Requires Company to Delete Models Trained with Improperly Utilized Consumer Data
  19 January 2021
  Avi Gesser
  ,
  Jim Pastore
  ,
  Paul D. Rubin
  ,
  Melissa Runsten
• 2020/2021 Private Equity Year End Review and Outlook
  7 January 2021
  Jonathan Adler
  ,
  William D. Regner
  ,
  John W. Rife III
  ,
  Jennifer R. Cestaro
  ,
  Katherine Ashton
  ,
  E. Drew Dutton
  ,
  Jane Engelhardt
  ,
  Thomas Smith
  ,
  Ramya S. Tiller
  ,
  Christopher Anthony
  ,
  Kevin M. Schmidt
  ,
  Maurizio Levi-Minzi
  ,
  Geoffrey P. Burgess
  ,
  Dominic Blaxill
  ,
  Wen-Wei Lai
  ,
  Jyotin Hamid
  ,
  Morgan J. Hayes
  ,
  Steven J. Slutzky
  ,
  Richard Ward
  ,
  Jennifer Wheater
  ,
  Paul Eastham
  ,
  Peter A. Furci
  ,
  Rafael Kariyev
  ,
  Jay E. Evans
  ,
  Samuel D. Krawiecz
  ,
  Andrew L. Bab
  ,
  Paul D. Rubin
  ,
  Jacob W. Stahl
  ,
  Kim T. Le
  ,
  Jyotin Hamid
  ,
  Jonathan F. Lewis
  ,
  Tricia Bozyk Sherno
  ,
  Ezra Borut
  ,
  Jeffrey P. Cunard
  ,
  Marc Ponchione
  ,
  Kenneth J. Berman
  ,
  Patricia Volhard
  ,
  Christopher Dortschy
  ,
  Jin-Hyuk Jang
  ,
  John Young
  ,
  Andrew J. Ceresney
  ,
  Robert B. Kaplan
  ,
  Julie M. Riewe
  ,
  Sally Bergmann Hardesty
  ,
  Scott B. Selinger
  ,
  Stuart Hammer
  ,
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Megan K. Bannigan
  ,
  David H. Bernstein
  ,
  M. Natasha Labovitz
  ,
  Sidney P. Levinson
  ,
  Peter J. Irwin
  ,
  Malina Welman
  ,
  Paul S. Bird
• Banking Agencies Propose 36-Hour Data Breach Reporting Rules for Significant Incidents
  18 December 2020
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Satish M. Kini
  ,
  Gregory J. Lyons
  ,
  Jim Pastore
  ,
  Alexandra N. Mogul
• Compliance & Enforcement: Post-Election Law Privacy Law Prospects
  6 November 2020
  Compliance & Enforcement
  Avi Gesser
  ,
  Jim Pastore
  ,
  Mengyi Xu
  ,
  Jeffrey P. Cunard
  ,
  Luke Dembosky
  ,
  Tigist Kassahun
• Bloomberg Law: AI Legal Work Is Mirroring Cybersecurity Practice Path
  10 September 2020
  Bloomberg Law
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
• FinCEN Issues Guidance on the Customer Due Diligence Rule and Advisory on Cyber Crimes
  7 August 2020
  Luke Dembosky
  ,
  Satish M. Kini
  ,
  Jim Pastore
• Compliance & Enforcement: Schrems II – Where are we now?
  5 August 2020
  Compliance & Enforcement
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Dr. Friedrich Popp
  ,
  Fanny Gauthier
  ,
  Robert Maddox
  ,
  Mengyi Xu
• Schrems II: Privacy Shield Invalid and Severe Challenges for Standard Contractual Clauses
  17 July 2020
  Jeffrey P. Cunard
  ,
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Dr. Thomas Schürrle
  ,
  Alexandre Bisch
  ,
  Fanny Gauthier
  ,
  Robert Maddox
  ,
  Dr. Friedrich Popp
• CCPA Regulations Submitted to the California Office of Administrative Law for Publication
  4 June 2020
  Jeffrey P. Cunard
  ,
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  HJ Brehmer
  ,
  Christopher S. Ford
• French Authorities’ Cybersecurity Tips for Companies and Their Employees Working from Home
  21 May 2020
  Antoine F. Kirry
  ,
  Alexandre Bisch
  ,
  Fanny Gauthier
  ,
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
• Can Contact Tracing Apps Help Get Many of Us Back to Work Soon? A Framework for Evaluating the Various Options and Legal Concerns
  24 April 2020
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Samantha B. Singh
• California AG Updates Draft CCPA Regulations (Again)
  19 March 2020
  Jeffrey P. Cunard
  ,
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Henry Lebowitz
  ,
  Jim Pastore
  ,
  Kate Saba
• Debevoise Coronavirus Checklists—Cybersecurity
  10 March 2020
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Tricia Bozyk Sherno
  ,
  Hilary Davidson
  ,
  Christopher S. Ford
• In re: Marriott International Inc., Customer Data Security Breach Litigation
  27 February 2020
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Suchita Mandavilli Brundage
• Fifteen Ways to Reduce Regulatory and Reputational Risks for Your AI-Powered Applications – Lessons from Recent Court Decisions and Regulatory Activity
  20 February 2020
  Jeffrey P. Cunard
  ,
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Henry Lebowitz
  ,
  Jim Pastore
  ,
  Steven Tegrar
• Proposed Modifications to CCPA Regulations - Top Takeaways
  12 February 2020
  Jeffrey P. Cunard
  ,
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Javier Alvarez-Oviedo
  ,
  HJ Brehmer
  ,
  Christopher S. Ford
  ,
  Kate Saba
• The Practical Implications of the National Securities Clearing Corporation’s New Cybersecurity Rules
  7 February 2020
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Julie M. Riewe
  ,
  Paul M. Rodel
  ,
  HJ Brehmer
• SEC’s New Cyber Observations Highlight Operational Resiliency
  4 February 2020
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Robert B. Kaplan
  ,
  Jim Pastore
  ,
  Julie M. Riewe
  ,
  HJ Brehmer
  ,
  Stephanie Cipolla
  ,
  Christopher S. Ford
• 2020 OCIE Priorities: Private Equity Remains Area of Interest, Focus on Retail and New SEC and Market-Wide Developments
  15 January 2020
  Kenneth J. Berman
  ,
  Andrew J. Ceresney
  ,
  Luke Dembosky
  ,
  Robert B. Kaplan
  ,
  Jim Pastore
  ,
  Julie M. Riewe
  ,
  Jeff Robins
  ,
  Jonathan R. Tuttle
• Law360: Health Care AI Increasingly In Crosshairs Of State, Fed. Gov't
  9 January 2020
  Law360
  Maura Kathleen Monaghan
  ,
  Jim Pastore
• Have Your Say on CCPA
  18 November 2019
  Jeffrey P. Cunard
  ,
  Luke Dembosky
  ,
  Maura Kathleen Monaghan
  ,
  Jim Pastore
  ,
  Kate Saba
• Law360: German Report May Be Road Map For Future AI Regulation
  12 November 2019
  Law360
  Jim Pastore
  ,
  Dr. Friedrich Popp
• Forget Me Not: ‘Right to be Forgotten’ Limited to the EU
  2 October 2019
  Jeffrey P. Cunard
  ,
  Luke Dembosky
  ,
  Dr. Thomas Schürrle
  ,
  Jane Shvets
  ,
  Jim Pastore
  ,
  Alexandre Bisch
  ,
  Robert Maddox
  ,
  Dr. Friedrich Popp
• TMT Insights: What Is On The Horizon For Export Controls on “Emerging Technologies”? Industry Comments May Hold A Clue
  23 September 2019
  Jeffrey P. Cunard
  ,
  Jonathan E. Levitsky
  ,
  Jim Pastore
  ,
  Michael Schaper
• Failure to Prevent a Business Email Compromise, and to Notify Customers of It, Gives Rise to Sanctions Against Victim Company
  18 September 2019
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Christopher S. Ford
  ,
  Jaime Fried
• Not With a Bang But a Whimper: At the Deadline, Minor Amendments to the California Consumer Privacy Act
  18 September 2019
  Jeffrey P. Cunard
  ,
  Luke Dembosky
  ,
  Maura Kathleen Monaghan
  ,
  Jim Pastore
  ,
  Jane Shvets
• New York Updates Data Breach Notification Law and Imposes “Reasonable Security” Requirement
  29 July 2019
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Stephanie Cipolla
  ,
  Christopher S. Ford
  ,
  Jaime Fried
• Proposed £99 Million Marriott GDPR Data Breach Fine Underscores Importance of Cybersecurity in M&A
  16 July 2019
  Jeffrey P. Cunard
  ,
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Paul M. Rodel
  ,
  Jane Shvets
  ,
  Keith J. Slattery
  ,
  Stephanie Cipolla
  ,
  Robert Maddox
• ICO Proposes £183m Fine for British Airways GDPR Breach
  9 July 2019
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Dr. Thomas Schürrle
  ,
  Jane Shvets
  ,
  Alexandre Bisch
  ,
  Stephanie Cipolla
  ,
  Robert Maddox
  ,
  Dr. Friedrich Popp
• Key Takeaways on Data Privacy and Big Data from the National Association of Attorneys General Consumer Protection Conference
  7 June 2019
  Courtney M. Dankworth
  ,
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Christopher S. Ford
• The California Consumer Privacy Act: Compliance Strategies for Financial Institutions
  2 May 2019
  Luke Dembosky
  ,
  Satish M. Kini
  ,
  Maura Kathleen Monaghan
  ,
  Jim Pastore
  ,
  Jane Shvets
• TMT Insights: SEC Pares Back Required Content for Exhibit Filings: Takeaways for TMT
  23 April 2019
  Jeffrey P. Cunard
  ,
  Jonathan E. Levitsky
  ,
  Jim Pastore
  ,
  Paul M. Rodel
  ,
  Michael Schaper
• GDPR and Data Breach News: Are You Ready?
  5 March 2019
  Luke Dembosky
  ,
  Antoine F. Kirry
  ,
  Jim Pastore
  ,
  Dr. Thomas Schürrle
  ,
  Jane Shvets
  ,
  Alexandre Bisch
  ,
  Fanny Gauthier
  ,
  Robert Maddox
  ,
  Dr. Friedrich Popp
• OCIE’s 2019 Priorities Focus on Retail, But PE Managers Remain in Examiners’ Sights
  9 January 2019
  Jonathan Adler
  ,
  Kenneth J. Berman
  ,
  Andrew J. Ceresney
  ,
  Luke Dembosky
  ,
  Robert B. Kaplan
  ,
  Jim Pastore
  ,
  Julie M. Riewe
  ,
  Rebecca F. Silberstein
  ,
  Jonathan R. Tuttle
• TMT Insights: A Skeptical D.C. Circuit Hears Oral Argument in the Government’s Appeal of the AT&T-Time Warner Merger
  21 December 2018
  Jonathan E. Levitsky
  ,
  Jim Pastore
  ,
  Michael Schaper
  ,
  Leah Martin
• Basel Committee Publishes Report on Cyber-Resilience Practices
  14 December 2018
  Luke Dembosky
  ,
  Matthew E. Kaplan
  ,
  Jim Pastore
  ,
  Paul M. Rodel
• TMT Insights: CFIUS Launches Pilot Program Targeted at Technology
  9 November 2018
  Jonathan E. Levitsky
  ,
  Jim Pastore
  ,
  Michael Schaper
  ,
  Jeffrey P. Cunard
• TMT Insights: Key Insights from the New York AI in Finance Summit
  18 October 2018
  Jonathan E. Levitsky
  ,
  Jim Pastore
  ,
  Michael Schaper
• SEC Investigation Report: Internal Accounting Controls Must be Calibrated to Cyber Risk
  17 October 2018
  Luke Dembosky
  ,
  Matthew E. Kaplan
  ,
  Jim Pastore
  ,
  Paul M. Rodel
  ,
  Steven J. Slutzky
• Amendments to the California Consumer Privacy Act of 2018
  26 September 2018
  Luke Dembosky
  ,
  Maura Kathleen Monaghan
  ,
  Jim Pastore
  ,
  Jane Shvets
• TMT Insights: Derived Data: Contracting Considerations and Market Practices
  30 August 2018
  Jeffrey P. Cunard
  ,
  Henry Lebowitz
  ,
  Jonathan E. Levitsky
  ,
  Jim Pastore
  ,
  Michael Schaper
• Privacy Law Goes Big: California’s New Consumer Privacy Act
  3 July 2018
  Luke Dembosky
  ,
  Maura Kathleen Monaghan
  ,
  Jim Pastore
  ,
  Jane Shvets
• LabMD Beats FTC in Cybersecurity Appeal – What’s Next for “Reasonableness”-Based Enforcement Cases?
  26 June 2018
  Jim Pastore
  ,
  Paul D. Rubin
• GDPR Is Here: Now What?
  11 June 2018
  Jim Pastore
  ,
  Jane Shvets
  ,
  Robert Maddox
• TMT Insights: A Checklist for Cybersecurity and Data Privacy Diligence in TMT Transactions
  30 May 2018
  Jeffrey P. Cunard
  ,
  Jonathan E. Levitsky
  ,
  Jim Pastore
  ,
  Michael Schaper
• Breach Notification Hits the Big 5-0: Now the Law in All U.S. States
  24 April 2018
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Stephanie Cipolla
• Debevoise Discusses the New SEC Cybersecurity Guidance
  26 March 2018
  The Columbia Law School Blue Sky Blog
  Luke Dembosky
  ,
  Matthew E. Kaplan
  ,
  Jim Pastore
  ,
  Paul M. Rodel
• New SEC Cybersecurity Guidance: Focus on Governance
  12 March 2018
  Luke Dembosky
  ,
  Matthew E. Kaplan
  ,
  Jim Pastore
  ,
  Paul M. Rodel
  ,
  Steven J. Slutzky
  ,
  Joshua M. Samit
• New FTC Guidance for Security Updates to Mobile Devices and Applications
  7 March 2018
  Jeffrey P. Cunard
  ,
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Christopher S. Ford
• SEC Issues New Guidance on Public Company Cybersecurity Disclosure and Governance
  22 February 2018
  Luke Dembosky
  ,
  Matthew E. Kaplan
  ,
  Jim Pastore
  ,
  Paul M. Rodel
  ,
  Steven J. Slutzky
  ,
  Joshua M. Samit
• Draft EU Guidelines on Cross-Border Data Transfer
  21 February 2018
  Jim Pastore
  ,
  Dr. Thomas Schürrle
  ,
  Jane Shvets
  ,
  Dr. Friedrich Popp
• UK Telecoms Retailer Fined for Data Security Failures – What Can Others Learn?
  18 January 2018
  Jim Pastore
  ,
  Jane Shvets
  ,
  Robert Maddox
• NY Cybersecurity Bill Shows “Reasonable Security” Standard Gathering Force
  7 November 2017
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Christopher S. Ford
• SEC Releases Observations from Cybersecurity Examinations
  14 August 2017
  Kenneth J. Berman
  ,
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Julie Stem
• NAIC Cybersecurity Model Law Moves One Step Closer to Approval
  11 August 2017
  Luke Dembosky
  ,
  Eric Dinallo
  ,
  Jim Pastore
• Petya Ransomware Attacks
  28 June 2017
  Luke Dembosky
  ,
  Mark Johnson
  ,
  Jim Pastore
  ,
  Jane Shvets
  ,
  Stephanie Cipolla
  ,
  Robert Maddox
• China’s Network Security Law Takes Effect
  9 June 2017
  Jeffrey P. Cunard
  ,
  Luke Dembosky
  ,
  Mark Johnson
  ,
  Jim Pastore
  ,
  Philip Rohlik
• New Regulation of Online Cinemas in Russia
  2 June 2017
  Jeffrey P. Cunard
  ,
  Luke Dembosky
  ,
  Dmitri V. Nikiforov
  ,
  Jim Pastore
  ,
  Jane Shvets
• Russian Data Protection Developments: Localization, Messengers and Data Transfer
  31 May 2017
  Luke Dembosky
  ,
  Dmitri V. Nikiforov
  ,
  Jim Pastore
  ,
  Jane Shvets
• Information Security Programs Play a Central Role in Target Data Breach Settlement
  25 May 2017
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Stephanie Cipolla
• GDPR – 12 Months to Go – 10 Steps You Should Consider Now
  23 May 2017
  Pierre Clermontel
  ,
  Jim Pastore
  ,
  Dr. Thomas Schürrle
  ,
  Jane Shvets
  ,
  Fanny Gauthier
  ,
  Robert Maddox
  ,
  Dr. Friedrich Popp
• Executive Order on Cybersecurity Raises More Questions than It Answers
  17 May 2017
  Luke Dembosky
  ,
  Jim Pastore
• Global Ransomware Attack: Essential Steps To Manage The Risks
  14 May 2017
  Luke Dembosky
  ,
  Mark Johnson
  ,
  Jim Pastore
  ,
  Jane Shvets
  ,
  Stephanie Cipolla
  ,
  Robert Maddox
• Seven Takeaways from the UK Government’s Cybersecurity Regulation and Incentives Review
  6 February 2017
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Jane Shvets
  ,
  Robert Maddox
• Debevoise Analyzes Revised New York Cybersecurity Regulation For The Financial Sector
  17 January 2017
  The CLS Blue Sky Blog: Columbia Law School’s Blog On Corporations And The Capital Markets
  Luke Dembosky
  ,
  Eric Dinallo
  ,
  Jim Pastore
• While You Were Celebrating: Cyber and Privacy News from the Holiday Season
  4 January 2017
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Dr. Thomas Schürrle
  ,
  Philip Rohlik
• New York Eases Proposed Cybersecurity Regulation for Financial Sector, But Practical Issues Remain
  3 January 2017
  Luke Dembosky
  ,
  Eric Dinallo
  ,
  Jim Pastore
• Trends in the U.S. of Cybersecurity Responsibility
  January 2017
  Business Law Journal
  Jim Pastore
  ,
  Luke Dembosky
  ,
  Naomi Aoyama
• Badger Breach: Good Housekeeping?
  12 December 2016
  Luke Dembosky
  ,
  Jim Pastore
• A Cybersecurity Fine From FINRA
  5 December 2016
  Luke Dembosky
  ,
  Jim Pastore
• Expert Q&A on Data Security in Arbitration
  1 December 2016
  Practical Law Arbitration
  Jim Pastore
  ,
  Megan K. Bannigan
• China Passes Network Security Law
  10 November 2016
  Mark Johnson
  ,
  Jim Pastore
  ,
  Philip Rohlik
• UK Government Launches Five Year National Cyber Security Strategy
  2 November 2016
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Jane Shvets
  ,
  Robert Maddox
• Federal Financial Regulators to Propose Enhanced Cyber Risk Management Standards
  25 October 2016
  Luke Dembosky
  ,
  Eric Dinallo
  ,
  Gregory J. Lyons
  ,
  Jim Pastore
  ,
  Johanna N. Skrzypczyk
• UK Telco Fined for Cyber Breach: Lessons Learned
  19 October 2016
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Jane Shvets
  ,
  Robert Maddox
• SFC Cybersecurity Review of Internet/Mobile Trading Systems
  17 October 2016
  Luke Dembosky
  ,
  Mark Johnson
  ,
  Jim Pastore
  ,
  Robert Maddox
• New York’s Proposed Cyber Regulations: Implications and Challenges
  15 September 2016
  Luke Dembosky
  ,
  Eric Dinallo
  ,
  Gregory J. Lyons
  ,
  Jim Pastore
• How to Disclose a Cybersecurity Event: Recent Fortune 100 Experience
  12 September 2016
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Paul M. Rodel
  ,
  Brett M. Novick
  ,
  Benjamin R. Pedersen
• New Federal Ransomware Guidance
  19 July 2016
  Luke Dembosky
  ,
  Mark P. Goodman
  ,
  Maura Kathleen Monaghan
  ,
  Jim Pastore
  ,
  David Sarratt
• Debevoise Publishes Spring 2016 Edition of UK, US and Hong Kong Banking Litigation, Regulatory and Competition Law Update
  April 2016
  Lord Goldsmith KC
  ,
  Karolos Seeger
  ,
  Christopher Boyne
  ,
  Robert Maddox
  ,
  Paul R. Berger
  ,
  Helen V. Cantwell
  ,
  Courtney M. Dankworth
  ,
  Eric Dinallo
  ,
  Mary Beth Hogan
  ,
  Robert B. Kaplan
  ,
  David A. O'Neil
  ,
  Jim Pastore
  ,
  Jonathan R. Tuttle
  ,
  Bruce E. Yannett
  ,
  Mark Johnson
  ,
  Philip Rohlik
  ,
  Emily Lam
  ,
  Timothy McIver
  ,
  Anne-Mette Heemsoth
• FDA’s New Guidance On Cybersecurity For Medical Devices: Important Lessons For The Entire Healthcare Industry
  25 April 2016
  Bloomberg BNA Health IT Law & Industry Report
  Mark P. Goodman
  ,
  Maura Kathleen Monaghan
  ,
  Jim Pastore
  ,
  David Sarratt
  ,
  Jacob W. Stahl
• A Week of Hot News in Cybersecurity and Data Privacy
  8 March 2016
  Lawrence K. Cagney
  ,
  Luke Dembosky
  ,
  Jonathan F. Lewis
  ,
  Jim Pastore
  ,
  Dr. Friedrich Popp
• Debevoise & Plimpton LLP On Cybersecurity: Developing Incident Response Plans For Private Equity Firms
  29 February 2016
  Private Equity Growth Capital Council
  Jim Pastore
  ,
  David Sarratt
• NFA Cybersecurity Notice Takes Effect March 1
  19 February 2016
  Byungkwon Lim
  ,
  Jim Pastore
  ,
  Gary E. Murphy
• FDA Publishes Guidance on Postmarket Cybersecurity Risk Management for Medical Device Manufacturers
  25 January 2016
  Mark P. Goodman
  ,
  Maura Kathleen Monaghan
  ,
  Jim Pastore
  ,
  David Sarratt
  ,
  Jacob W. Stahl
• The Shape of Things to Come: OCIE Announces Examination Priorities for 2016
  13 January 2016
  Kenneth J. Berman
  ,
  Michael P. Harrell
  ,
  Robert B. Kaplan
  ,
  Jim Pastore
  ,
  Julie Stem
• The Cybersecurity Information Sharing Act
  6 January 2016
  David A. O'Neil
  ,
  Jim Pastore
• FCPA Update November 2015
  Vol. 7, No. 4
  Dr. Thomas Schürrle
  ,
  Jeffrey P. Cunard
  ,
  Jim Pastore
  ,
  Dr. Friedrich Popp
• New Federal Guidance on Cybersecurity for Mobile Devices
  9 November 2015
  Jim Pastore
• Transfers of Personal Data to the United States: European Court of Justice Rules the Safe Harbour Protocol Is Potentially Invalid
  6 October 2015
  Dr. Thomas Schürrle
  ,
  Karolos Seeger
  ,
  Jim Pastore
  ,
  Jeffrey P. Cunard
  ,
  David A. O'Neil
• SEC Sanctions Investment Adviser for Failing to Adopt Cybersecurity Policies and Procedures
  24 September 2015
  Kenneth J. Berman
  ,
  Jeffrey P. Cunard
  ,
  Michael P. Harrell
  ,
  David A. O'Neil
  ,
  Jim Pastore
  ,
  David Sarratt
• SEC Releases Updated Cybersecurity Examination Guidelines
  18 September 2015
  Kenneth J. Berman
  ,
  David A. O'Neil
  ,
  Jim Pastore
  ,
  David Sarratt
• The “Yates Memorandum”: Has DOJ Really Changed Its Approach To White Collar Criminal Investigations and Individual Prosecutions?
  15 September 2015
  Helen V. Cantwell
  ,
  Matthew E. Fishbein
  ,
  Bruce E. Yannett
  ,
  David A. O'Neil
  ,
  Paul R. Berger
  ,
  Courtney M. Dankworth
  ,
  Eric Dinallo
  ,
  Mark P. Goodman
  ,
  Mary Beth Hogan
  ,
  Robert B. Kaplan
  ,
  Satish M. Kini
  ,
  Andrew M. Levine
  ,
  Michael B. Mukasey
  ,
  Jim Pastore
  ,
  Colby A. Smith
  ,
  Jonathan R. Tuttle
  ,
  Erich O. Grosz
  ,
  David Sarratt
• Court Upholds FTC Cyber Authority; Recent FTC Guidance on Insider Breaches Looms Larger
  25 August 2015
  David Sarratt
  ,
  David A. O'Neil
  ,
  Jim Pastore
• Cyber Crime Gets Back to Basics: How Cyber Criminals Are Monetizing Stolen Information Through Well-Worn Criminal Strategies
  17 August 2015
  David A. O'Neil
  ,
  Jim Pastore
  ,
  David Sarratt
• Data Breach Plaintiffs’ Suit Reinstated; Court Holds Affected Customers Have Standing
  28 July 2015
  Jeffrey P. Cunard
  ,
  David A. O'Neil
  ,
  Jim Pastore
• Cybersecurity: Evaluating Transactional Risk
  1 July 2015
  Transaction Advisors
  Jeffrey P. Cunard
  ,
  Jim Pastore
• A Closer Look
  June 2015
  Best’s Review
  Marilyn A. Lion
  ,
  Jim Pastore
• SEC Issues Cybersecurity Guidance for Registered Investment Advisers and Funds
  7 May 2015
  Jim Pastore
  ,
  Kenneth J. Berman
  ,
  Jeffrey P. Cunard
  ,
  Robert B. Kaplan
  ,
  David A. O'Neil
• New York State Department Of Financial Services Expands Its Cyber Focus To Insurers
  23 April 2015
  FC&S Legal
  Eric Dinallo
  ,
  David A. O'Neil
  ,
  Jim Pastore
• U.S. Authorizes Cyber Sanctions, Recommends Tech Companies Adopt Compliance Programs
  6 April 2015
  Satish M. Kini
  ,
  David A. O'Neil
  ,
  Carl Micarelli
  ,
  Jim Pastore
  ,
  Robert T. Dura
• Proposed Target Settlement Provides Roadmap for Future Consumer Settlements in Large-Scale Data Breach Cases
  1 April 2015
  David A. O'Neil
  ,
  Jim Pastore
  ,
  Megan K. Bannigan
• DFS Expands Its Cyber Focus to Insurers
  30 March 2015
  Eric Dinallo
  ,
  Jim Pastore
  ,
  David A. O'Neil
• Debevoise & Plimpton On Cybersecurity: Reducing Threats To Private Equity Firms And Their Portfolio Companies
  24 March 2015
  The Newsletter of the Private Equity Growth Capital Council
  Jeffrey P. Cunard
  ,
  Jim Pastore
• New Cyber Guidance From NY DFS: A Possible Path To “Reasonable Security”
  19 December 2014
  Eric Dinallo
  ,
  Gregory J. Lyons
  ,
  Satish M. Kini
  ,
  Jim Pastore