Publications

• CPPA Proposed Rulemaking Package Part 2—Automated Decision-Making Technology
  14 February 2025
  Avi Gesser
  ,
  Matt Kelly
  ,
  Johanna N. Skrzypczyk
  ,
  HJ Brehmer
  ,
  Ned Terrace
  ,
  Mengyi Xu
• FINRA’s 2025 Regulatory Oversight Report: Focus on Artificial Intelligence
  5 February 2025
  Charu A. Chandrasekhar
  ,
  Avi Gesser
  ,
  Jeff Robins
  ,
  Kristin A. Snyder
  ,
  Matt Kelly
  ,
  Cameron Sharp
  ,
  Ned Terrace
  ,
  Mengyi Xu
• Debevoise Data Blog: FTC’s Consent Order Against Marriott: Expectations for Reasonable Security
  30 January 2025
  Debevoise Data Blog
  Erez Liebermann
  ,
  Jim Pastore
  ,
  Christopher S. Ford
  ,
  Michael Bloom
  ,
  Mengyi Xu
  ,
  Achutha N. Raman
  ,
  Michelle Shen
• Treasury’s Post-2024 RFI Report on AI in Financial Services – Uses, Opportunities, and Risks
  24 January 2025
  Charu A. Chandrasekhar
  ,
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Gregory J. Lyons
  ,
  Jeff Robins
  ,
  Jeremy I. Liss
  ,
  Ned Terrace
  ,
  Mengyi Xu
• Colorado Proposes Extending AI Regulation to Health and Auto Insurers
  16 December 2024
  Eric Dinallo
  ,
  Avi Gesser
  ,
  Matt Kelly
  ,
  Samuel J. Allaman
  ,
  Melyssa Eigen
  ,
  Ned Terrace
  ,
  Stephanie D. Thomas
  ,
  Mengyi Xu
• Top 10 SEC Cyber/AI Blog Posts for 2024
  12 December 2024
  Andrew J. Ceresney
  ,
  Charu A. Chandrasekhar
  ,
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Eric T. Juergens
  ,
  Arian M. June
  ,
  Robert B. Kaplan
  ,
  Erez Liebermann
  ,
  Sheena Paul
  ,
  Benjamin R. Pedersen
  ,
  Marc Ponchione
  ,
  Julie M. Riewe
  ,
  Jeff Robins
  ,
  Paul M. Rodel
  ,
  Kristin A. Snyder
  ,
  Jonathan R. Tuttle
  ,
  Philip A. Fortino
  ,
  Matt Kelly
  ,
  Anna Moody
  ,
  Stephan J. Schlegelmilch
  ,
  Johanna N. Skrzypczyk
  ,
  Suchita Mandavilli Brundage
  ,
  Kelly Donoghue
  ,
  Andreas A. Glimenakis
  ,
  Alice Gu
  ,
  John Jacob
  ,
  Gabriel A. Kohan
  ,
  Talia Lorch
  ,
  Ciera Mandelsberg
  ,
  Noah L. Schwartz
  ,
  Ned Terrace
  ,
  Mengyi Xu
• CPPA Proposed Rulemaking Package Part 1 – Cybersecurity Audits
  3 December 2024
  Avi Gesser
  ,
  Matt Kelly
  ,
  Johanna N. Skrzypczyk
  ,
  HJ Brehmer
  ,
  Ned Terrace
  ,
  Mengyi Xu
  ,
  Amer Mneimneh
• Managing Cybersecurity Risks Arising from AI – New Guidance from the NYDFS
  21 October 2024
  Charu A. Chandrasekhar
  ,
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Johanna N. Skrzypczyk
  ,
  Ned Terrace
  ,
  Mengyi Xu
• 30 Days to Form ADV: Have You Reviewed Your AI Disclosures?
  26 February 2024
  Charu A. Chandrasekhar
  ,
  Avi Gesser
  ,
  Marc Ponchione
  ,
  Julie M. Riewe
  ,
  Kristin A. Snyder
  ,
  Matt Kelly
  ,
  Sheena Paul
  ,
  Ned Terrace
  ,
  Mengyi Xu
• NYU Compliance & Enforcement: SEC Proposes Rule to Eliminate or Neutralize Conflicts in the Use of “Predictive Data Analytics” Technologies
  29 August 2023
  NYU Compliance & Enforcement
  Andrew J. Ceresney
  ,
  Charu A. Chandrasekhar
  ,
  Avi Gesser
  ,
  Jeff Robins
  ,
  Matt Kelly
  ,
  Gary E. Murphy
  ,
  Jarrett Lewis
  ,
  Robert B. Kaplan
  ,
  Marc Ponchione
  ,
  Sheena Paul
  ,
  Catherine Morrison
  ,
  Julie M. Riewe
  ,
  Kristin A. Snyder
  ,
  Mengyi Xu
• Directors and Boards: Board Responsibility for AI Risk Oversight
  15 August 2023
  Directors and Boards
  William D. Regner
  ,
  Avi Gesser
  ,
  Charu A. Chandrasekhar
  ,
  Mengyi Xu
• SEC Proposes Rule to Eliminate or Neutralize Conflicts in the Use of “Predictive Data Analytics” Technologies
  14 August 2023
  Andrew J. Ceresney
  ,
  Charu A. Chandrasekhar
  ,
  Avi Gesser
  ,
  Robert B. Kaplan
  ,
  Marc Ponchione
  ,
  Julie M. Riewe
  ,
  Jeff Robins
  ,
  Kristin A. Snyder
  ,
  Matt Kelly
  ,
  Gary E. Murphy
  ,
  Sheena Paul
  ,
  Jarrett Lewis
  ,
  Catherine Morrison
  ,
  Mengyi Xu
• SEC Adopts New Cybersecurity Rules for Issuers – Part 2 Key Takeaways
  7 August 2023
  Charu A. Chandrasekhar
  ,
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Matthew E. Kaplan
  ,
  Erez Liebermann
  ,
  Benjamin R. Pedersen
  ,
  Paul M. Rodel
  ,
  Steven J. Slutzky
  ,
  Matt Kelly
  ,
  Kelly Donoghue
  ,
  John Jacob
  ,
  Amy Pereira
  ,
  Ned Terrace
  ,
  Mengyi Xu
  ,
  Chris Duff
• Artificial Intelligence in Healthcare: Balancing Risks and Rewards
  31 July 2023
  Andrew L. Bab
  ,
  Avi Gesser
  ,
  Kevin Rinker
  ,
  Paul D. Rubin
  ,
  Kim T. Le
  ,
  Tigist Kassahun
  ,
  Hannah R. Levine
  ,
  Melissa Runsten
  ,
  Mengyi Xu
• NYU Compliance & Enforcement: SEC Adopts New Cybersecurity Rules for Issuers
  31 July 2023
  NYU Compliance & Enforcement
  Charu A. Chandrasekhar
  ,
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Matthew E. Kaplan
  ,
  Erez Liebermann
  ,
  Benjamin R. Pedersen
  ,
  Paul M. Rodel
  ,
  Steven J. Slutzky
  ,
  Matt Kelly
  ,
  Kelly Donoghue
  ,
  John Jacob
  ,
  Amy Pereira
  ,
  Mengyi Xu
  ,
  Chris Duff
• SEC Adopts New Cybersecurity Rules for Issuers
  27 July 2023
  Charu A. Chandrasekhar
  ,
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Matthew E. Kaplan
  ,
  Erez Liebermann
  ,
  Benjamin R. Pedersen
  ,
  Paul M. Rodel
  ,
  Steven J. Slutzky
  ,
  Matt Kelly
  ,
  Kelly Donoghue
  ,
  John Jacob
  ,
  Amy Pereira
  ,
  Mengyi Xu
  ,
  Chris Duff
• NYU Compliance & Enforcement: A Late Winter Blizzard of SEC Cybersecurity Rulemaking: the Proposed BD Cybersecurity Rules and Expanded Reg S-P and Reg SCI Obligations
  30 March 2023
  NYU Compliance & Enforcement
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Marc Ponchione
  ,
  Julie M. Riewe
  ,
  Jeff Robins
  ,
  Kristin A. Snyder
  ,
  Charu A. Chandrasekhar
  ,
  Sheena Paul
  ,
  Suchita Mandavilli Brundage
  ,
  Mengyi Xu
  ,
  Ned Terrace
• A Late Winter Blizzard of SEC Cybersecurity Rulemaking: the Proposed BD Cybersecurity Rules and Expanded Reg S-P and Reg SCI Obligations
  20 March 2023
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Marc Ponchione
  ,
  Julie M. Riewe
  ,
  Jeff Robins
  ,
  Kristin A. Snyder
  ,
  Charu A. Chandrasekhar
  ,
  Sheena Paul
  ,
  Suchita Mandavilli Brundage
  ,
  Mengyi Xu
  ,
  Ned Terrace
• Risks of Overselling Your AI: The FTC is Watching
  6 March 2023
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Jim Pastore
  ,
  Paul D. Rubin
  ,
  Christopher S. Ford
  ,
  Mengyi Xu
• Practising Law Institute: Privacy Law Answer Book
  23 January 2023
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jyotin Hamid
  ,
  Satish M. Kini
  ,
  Henry Lebowitz
  ,
  Erez Liebermann
  ,
  Maura Kathleen Monaghan
  ,
  David A. O'Neil
  ,
  Jim Pastore
  ,
  David Sarratt
  ,
  Jeffrey P. Cunard
  ,
  Kim T. Le
  ,
  Tricia Bozyk Sherno
  ,
  Johanna N. Skrzypczyk
  ,
  Michael Bloom
  ,
  Fanny Gauthier
  ,
  Hannah R. Levine
  ,
  Linda Lin
  ,
  Kate Saba
  ,
  Noah L. Schwartz
  ,
  Mengyi Xu
• CLS Blue Sky Blog: Debevoise & Plimpton Discusses the Myth of Artificial Intelligence Errors
  2 December 2022
  CLS Blue Sky Blog
  Avi Gesser
  ,
  Mengyi Xu
  ,
  Samuel J. Allaman
• NYDFS Publishes Official Amendments to Its Cybersecurity Regulation (Part 2) – Answers to the Top Questions from Our Webcast
  30 November 2022
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Johanna N. Skrzypczyk
  ,
  Mengyi Xu
• NYU Compliance & Enforcement: NYDFS Publishes Official Amendments to Its Cybersecurity Regulation
  14 November 2022
  NYU Compliance & Enforcement
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Caroline N. Swett
  ,
  Johanna N. Skrzypczyk
  ,
  Mengyi Xu
• NYDFS Publishes Official Amendments to Its Cybersecurity Regulation
  11 November 2022
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Caroline N. Swett
  ,
  Johanna N. Skrzypczyk
  ,
  Mengyi Xu
• CLS Blue Sky Blog: Debevoise & Plimpton Discusses Executive Order Paving Way for New EU-U.S. Data Transfer Framework
  1 November 2022
  CLS Blue Sky Blog
  Robert Maddox
  ,
  Dr. Friedrich Popp
  ,
  Mengyi Xu
• Compliance & Enforcement: NYDFS Proposes Significant Changes to Its Cybersecurity Rules
  1 August 2022
  Compliance & Enforcement
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Jim Pastore
  ,
  Charu A. Chandrasekhar
  ,
  HJ Brehmer
  ,
  Mengyi Xu
• NYDFS Proposes Significant Changes to Its Cybersecurity Rules
  1 August 2022
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Jim Pastore
  ,
  Charu A. Chandrasekhar
  ,
  HJ Brehmer
  ,
  Mengyi Xu
• NYU Compliance & Enforcement: New Automated Decision-Making Laws: Four Tips for Compliance
  29 June 2022
  NYU Compliance & Enforcement
  Avi Gesser
  ,
  Robert Maddox
  ,
  Mengyi Xu
  ,
  Samuel J. Allaman
• New Automated Decision-Making Laws: Four Tips for Compliance
  27 June 2022
  Avi Gesser
  ,
  Robert Maddox
  ,
  Samuel J. Allaman
  ,
  Mengyi Xu
• NYU Compliance & Enforcement: The SEC’s New Risk Alert Warns about the Use of Alternative Data
  3 May 2022
  NYU Compliance & Enforcement
  Andrew J. Ceresney
  ,
  Avi Gesser
  ,
  Julie M. Riewe
  ,
  Kristin A. Snyder
  ,
  Jonathan R. Tuttle
  ,
  Charu A. Chandrasekhar
  ,
  Mengyi Xu
• The SEC’s New Risk Alert Warns about the Use of Alternative Data
  2 May 2022
  Andrew J. Ceresney
  ,
  Avi Gesser
  ,
  Julie M. Riewe
  ,
  Kristin A. Snyder
  ,
  Jonathan R. Tuttle
  ,
  Charu A. Chandrasekhar
  ,
  Mengyi Xu
• An In-Depth Review of the SEC Proposed Climate Change Disclosure Rule
  25 April 2022
  Eric T. Juergens
  ,
  Satish M. Kini
  ,
  Gregory J. Lyons
  ,
  Jeff Robins
  ,
  Kristin A. Snyder
  ,
  Caroline N. Swett
  ,
  Ulysses Smith
  ,
  Isabelle Glimcher
  ,
  Mengyi Xu
• SEC Issues Long-Awaited Proposed Climate Change Disclosure Rule
  24 March 2022
  Eric T. Juergens
  ,
  Andrew M. Levine
  ,
  Ulysses Smith
  ,
  Caroline N. Swett
  ,
  Isabelle Glimcher
  ,
  Mengyi Xu
  ,
  Zoë Zissu
• Latin Lawyer – The Guide to Corporate Crisis Management: Data Privacy and Cybersecurity: Crisis Avoidance and Management Strategies
  16 December 2021
  Latin Lawyer – The Guide to Corporate Crisis Management
  Andrew M. Levine
  ,
  Johanna N. Skrzypczyk
  ,
  HJ Brehmer
  ,
  Michael Bloom
  ,
  Hilary Davidson
  ,
  Mengyi Xu
• Compliance & Enforcement: Three Takeaways from the IOSCO Report to Securities Regulators on Artificial Intelligence
  18 October 2021
  Compliance & Enforcement
  Avi Gesser
  ,
  Mengyi Xu
• Three Takeaways from the IOSCO Report to Securities Regulators on Artificial Intelligence
  14 October 2021
  Avi Gesser
  ,
  Mengyi Xu
• Compliance & Enforcement: Recent SEC Enforcement Action Against App Annie Signals Continuing Focus on Data-related Disclosure and Policy Violations
  21 September 2021
  Compliance & Enforcement
  Avi Gesser
  ,
  Charu A. Chandrasekhar
  ,
  Mengyi Xu
• Recent SEC Enforcement Action against App Annie Signals Continuing Focus on Data-Related Disclosure and Policy Violations
  20 September 2021
  Avi Gesser
  ,
  Charu A. Chandrasekhar
  ,
  Mengyi Xu
• Columbia Blue Sky Blog: Debevoise & Plimpton on the Latest Round of SEC Cybersecurity Enforcement Actions
  7 September 2021
  Columbia Blue Sky Blog
  Avi Gesser
  ,
  Jim Pastore
  ,
  Mengyi Xu
• The Latest Round of SEC Cybersecurity Enforcement Actions Targets MFA Deficiencies, Inadequate Policies, and Misleading Breach Notifications
  1 September 2021
  Avi Gesser
  ,
  Jim Pastore
  ,
  Mengyi Xu
• Effective Access Controls, Timely Breach Notification and Other Takeaways from the Latest NYDFS Cyber Resolution
  15 April 2021
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Johanna N. Skrzypczyk
  ,
  Christopher S. Ford
  ,
  Mengyi Xu
• The SEC’s Cybersecurity Priorities for Registered Investment Advisers—Looking Back to Anticipate the Road Ahead
  11 March 2021
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Tricia Reville
  ,
  Mengyi Xu
• Compliance & Enforcement: Post-Election Law Privacy Law Prospects
  6 November 2020
  Compliance & Enforcement
  Avi Gesser
  ,
  Jim Pastore
  ,
  Mengyi Xu
  ,
  Jeffrey P. Cunard
  ,
  Luke Dembosky
  ,
  Tigist Kassahun
• Companies Face Increased Sanctions Risk for Making Ransomware Payments — Takeaways from the Latest OFAC and FinCEN Advisories
  7 October 2020
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Satish M. Kini
  ,
  Paul M. Rodel
  ,
  Martha Hirst
  ,
  Robert Maddox
  ,
  Mengyi Xu
• Compliance & Enforcement: Schrems II – Where are we now?
  5 August 2020
  Compliance & Enforcement
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Dr. Friedrich Popp
  ,
  Fanny Gauthier
  ,
  Robert Maddox
  ,
  Mengyi Xu