Publications

• Debevoise Data Blog: Biden Administration Proposes to Limit Access to Sensitive Personal Data by Countries of Concern
  6 November 2024
  Debevoise Data Blog
  Satish M. Kini
  ,
  Rick Sofield
  ,
  Erez Liebermann
  ,
  Robert T. Dura
  ,
  Taylor Richards
  ,
  Stephanie D. Thomas
  ,
  Jordan Corrente Beck
  ,
  Yair Strachman
• Debevoise Data Blog: NYDFS Part 500, One Year Later (Part One) – New Requirements Effective November 1, 2024
  30 October 2024
  Debevoise Data Blog
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Stephanie D. Thomas
  ,
  Joshua A. Goland
• HUD Proposes to Narrow its Cyber Incident Notification Requirement
  10 October 2024
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Anna Moody
  ,
  Karen Joo
  ,
  Stephanie D. Thomas
• Debevoise Data Blog: European Data Protection Roundup – July 2024
  27 August 2024
  Debevoise Data Blog
  Robert Maddox
  ,
  Dr. Friedrich Popp
  ,
  Stephanie D. Thomas
  ,
  Joshua Plastrik
  ,
  Theo Wilson
  ,
  Deniz Tanyolac
• Debevoise Data Blog: Financial Services Industry Comments on CISA’s Proposed Reporting Obligations for Critical Infrastructure
  10 July 2024
  Debevoise Data Blog
  Erez Liebermann
  ,
  Gabriel A. Kohan
  ,
  H Jacqueline Brehmer
  ,
  Stephanie D. Thomas
  ,
  Jarrett Lewis
  ,
  Melyssa Eigen
  ,
  Joshua A. Goland
  ,
  Annabella M. Waszkiewicz
• Debevoise National Security Update: Department of Commerce Issues First Final Determination under ICTS Regime
  25 June 2024
  Catherine Amirfar
  ,
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Rick Sofield
  ,
  Robert T. Dura
  ,
  Isabelle Glimcher
  ,
  Gabriel A. Kohan
  ,
  Stephanie D. Thomas
• Debevoise Data Blog: European Data Protection Roundup - April
  28 May 2024
  Debevoise Data Blog
  Robert Maddox
  ,
  Dr. Friedrich Popp
  ,
  Fanny Gauthier
  ,
  Stephanie D. Thomas
  ,
  Michiko Wongso
• Debevoise Data Blog: EU Digital Operational Resilience Act (“DORA”): Incident and Cyber Threat Reporting and Considerations for Incident Response Plans
  13 May 2024
  Debevoise Data Blog
  Robert Maddox
  ,
  Stephanie D. Thomas
  ,
  Annabella M. Waszkiewicz
  ,
  Michiko Wongso
• U.S. Acts to Limit Export of Sensitive Personal Data
  19 March 2024
  Satish M. Kini
  ,
  Erez Liebermann
  ,
  Rick Sofield
  ,
  Robert T. Dura
  ,
  Taylor Richards
  ,
  Stephanie D. Thomas
  ,
  Yair Strachman
• Debevoise National Security Update: Supply Chain Security in 2024
  11 March 2024
  Catherine Amirfar
  ,
  Luke Dembosky
  ,
  Satish M. Kini
  ,
  Erez Liebermann
  ,
  Rick Sofield
  ,
  Robert T. Dura
  ,
  Gabriel A. Kohan
  ,
  Stephanie D. Thomas
• A Summary of the Final Amendments to the NYDFS Cyber Rules
  15 November 2023
  Charu A. Chandrasekhar
  ,
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Caroline N. Swett
  ,
  Johanna N. Skrzypczyk
  ,
  Stephanie D. Thomas
  ,
  Joshua A. Goland
• NYU: The Final Colorado AI Insurance Regulations: What’s New and How to Prepare
  11 October 2023
  NYU
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Eric Dinallo
  ,
  Matt Kelly
  ,
  Samuel J. Allaman
  ,
  Basil Fawaz
  ,
  Stephanie D. Thomas
• The Final Colorado AI Insurance Regulations: What’s New and How to Prepare
  3 October 2023
  Eric Dinallo
  ,
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Matt Kelly
  ,
  Samuel J. Allaman
  ,
  Basil Fawaz
  ,
  Stephanie D. Thomas
• Achieving Sensible AI Regulation
  18 July 2023
  Avi Gesser
  ,
  Matt Kelly
  ,
  Ned Terrace
  ,
  Stephanie D. Thomas
• SIFMA: Achieving Sensible AI Regulation
  17 July 2023
  SIFMA
  Avi Gesser
  ,
  Matt Kelly
  ,
  Stephanie D. Thomas
  ,
  Ned Terrace
• NYDFS Publishes Revised Amendments to Its Cybersecurity Regulation – What Got Fixed, and What Still Needs Fixing
  10 July 2023
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Ned Terrace
  ,
  Stephanie D. Thomas
• NYU Compliance & Enforcement: The New York Attorney General Issues Guidance on Data Security Best Practice
  27 June 2023
  NYU Compliance & Enforcement
  Avi Gesser
  ,
  Erez Liebermann
  ,
  Stephanie D. Thomas
  ,
  Basil Fawaz
• NYU Compliance & Enforcement: The Revised Colorado AI Insurance Regulations: What Was Fixed, and What Still May Need Fixing
  7 June 2023
  NYU Compliance & Enforcement
  Eric Dinallo
  ,
  Avi Gesser
  ,
  Matt Kelly
  ,
  Samuel J. Allaman
  ,
  Stephanie D. Thomas
• The Revised Colorado AI Insurance Regulations: What Was Fixed, and What Still May Need Fixing
  1 June 2023
  Eric Dinallo
  ,
  Avi Gesser
  ,
  Matt Kelly
  ,
  Samuel J. Allaman
  ,
  Stephanie D. Thomas
• Journal of Privacy and Data Protection: 8 Hallmarks of Effective Data Protection by Design and Default
  30 May 2023
  Journal of Privacy and Data Protection
  Robert Maddox
  ,
  Stephanie D. Thomas
• Harvard Forum on Corporate Governance: Takeaways from Proposed Changes to the NIST Cybersecurity Framework
  1 April 2023
  Harvard Forum on Corporate Governance
  Avi Gesser
  ,
  Erez Liebermann
  ,
  H Jacqueline Brehmer
  ,
  Stephanie D. Thomas
• FCPA Update April 2022
  28 April 2022
  Winston M. Paes
  ,
  Bruce E. Yannett
  ,
  Antoine F. Kirry
  ,
  Alexandre Bisch
  ,
  Aymeric D. Dumoulin
  ,
  Fanny Gauthier
  ,
  Stephanie D. Thomas
• Columbia Blue Sky Blog: Debevoise Discusses New Cyber Incident Reporting for Critical Infrastructure
  23 March 2022
  Columbia Blue Sky Blog
  Luke Dembosky
  ,
  Avi Gesser
  ,
  H Jacqueline Brehmer
  ,
  Stephanie D. Thomas
• CLS Blue Sky Blog: Debevoise & Plimpton Discusses Proposed Cybersecurity Legislation
  29 November 2021
  CLS Blue Sky Blog
  Luke Dembosky
  ,
  Avi Gesser
  ,
  H Jacqueline Brehmer
  ,
  Stephanie D. Thomas
• FCPA Update August 2020
  31 August 2020
  Kara Brockmeyer
  ,
  Karolos Seeger
  ,
  Jane Shvets
  ,
  Bruce E. Yannett
  ,
  Alexandre Bisch
  ,
  Andreas A. Glimenakis
  ,
  Dr. Friedrich Popp
  ,
  Stephanie D. Thomas
• FCPA Update June 2020
  30 June 2020
  Andrew M. Levine
  ,
  Dr. Thomas Schürrle
  ,
  Karolos Seeger
  ,
  Jane Shvets
  ,
  Dr. Friedrich Popp
  ,
  Stephanie D. Thomas
• FCPA Update February 2020
  28 February 2020
  Kara Brockmeyer
  ,
  Andrew J. Ceresney
  ,
  Andrew M. Levine
  ,
  David A. O'Neil
  ,
  Dr. Thomas Schürrle
  ,
  Karolos Seeger
  ,
  Jane Shvets
  ,
  Bruce E. Yannett
  ,
  Erich O. Grosz
  ,
  Alexandre Bisch
  ,
  Philip Rohlik
  ,
  Aisling Cowell
  ,
  Andreas A. Glimenakis
  ,
  Martha Hirst
  ,
  Andrew H. Lee
  ,
  Gabriel Silva
  ,
  Stephanie D. Thomas
  ,
  Suzanne Zakaria
  ,
  Valerie A. Zuckerman
• FCPA Update January 2020
  31 January 2020
  Kara Brockmeyer
  ,
  Andrew J. Ceresney
  ,
  Andrew M. Levine
  ,
  David A. O'Neil
  ,
  Dr. Thomas Schürrle
  ,
  Karolos Seeger
  ,
  Jane Shvets
  ,
  Bruce E. Yannett
  ,
  Erich O. Grosz
  ,
  Alexandre Bisch
  ,
  Philip Rohlik
  ,
  Aisling Cowell
  ,
  Andreas A. Glimenakis
  ,
  Martha Hirst
  ,
  Andrew H. Lee
  ,
  Dr. Friedrich Popp
  ,
  Gabriel Silva
  ,
  Stephanie D. Thomas
  ,
  Suzanne Zakaria
  ,
  Valerie A. Zuckerman