Author | Lightnews

Cybersecurity Law @cybersecuritylaw.bsky.social · 9m

Landmark civil penalty of AU$5.8 million issued under Australia’s privacy act

On 9 October 2025 the Federal Court of Australia (the Court) imposed an AU$5.8 million civil penalty on Australian Clinical Labs Limited, one of...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 13m

Beyond the Perimeter: Securing OAuth Tokens and API Access to Thwart Modern Cyber Attackers

OAuth tokens streamline access but create new vulnerabilities that threat actors are exploiting. Learn how to secure token infrastructure through...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 1h

California Imposes New Data Breach Notification Requirements

In 2002, California was the first state to enact a data breach notification statute. Since then, all 50 states and four U.S. jurisdictions...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 2h

Platform Regulation and Privacy – Unpacking the EDPB’s New Guidelines

On 12 September 2025, the European Data Protection Board (EDPB) issued draft guidelines (Guidance) on the interplay between the EU General Data...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 5h

Can Cyber Threat Intelligence Sharing Continue After CISA 2015’s Lapse?

The expiration of the Cybersecurity Information Sharing Act of 2015 (CISA 2015 or the Act) on September 30, 2025 has quietly reshaped how...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 16h

Ep. 85 – Halloween Special: Healthcare Compliance Nightmares (Ep. 38 Replay)

Compliance issues can quickly escalate into compliance nightmares, with serious implications for patient safety, legal liability, and an...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 19h

Third Circuit: Your Passwords May Be Valuable to You, But They Are Not Trade Secrets

The plaintiff National Recovery Agency Group, LLC (NRA) is a debt-collection firm that maintains large volumes of personally identifiable...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 23h

Combatting Supply Chain Cyber Threats: Safeguarding Data and Protecting Digital Supply Chains in a Rapidly Evolving Cyber Landscape

Manufacturing supply chains have become high‑value targets for cybercriminals, facing relentless attacks as the industry remains the most...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 23h

Night of the Living Breach: How Exposed Data Comes Back to Bite

In the spine-chilling world of cybersecurity, data breaches are monsters that never truly die. Long after headlines fade, the consequences can...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 1d

Cybersecurity Awareness Month Alert: Small Businesses in Texas May Be Protected

As this year’s Cybersecurity Awareness Month comes to an end, we wanted to highlight a recently enacted piece of legislation that may provide...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 1d

Cybersecurity Awareness Month: Protecting people, data, business integrity

October is National Cybersecurity Awareness Month, which is celebrating its 21st year. Spearheaded, organized and led by the Cybersecurity and...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 1d

Navigating OFAC Sanctions Risks From North Korean Remote Workers

With the continued rise in remote work, companies now face a unique vector for potentially significant sanctions risks that continues to catch...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 1d

OSB Issues New Guidance: What Licensed Insolvency Trustees Must Know about AI Tools

In recognition of the widespread adoption and integration of generative artificial intelligence (AI) within organizations, Canadian regulators,...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 2d

Something Old and Something New: The False Claims Act and Cybersecurity

The Department of Justice (DOJ) recently obtained several cybersecurity-related False Claims Act (FCA) settlements totaling more than $50 million...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 2d

NIH Follows in FDA’s Footsteps and Adopts “Bulk Sensitive Data” Policy That Goes Beyond DOJ Rule Requirements

The National Institutes of Health (“NIH”) has become the latest federal agency to impose obligations that go beyond those required by the...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 2d

Data Mining and Breach Notification in Cyber Incident Responses

Data breaches continue to be a major problem for corporations and organizations in 2025, and the U.S. Department of Justice, Criminal Division,...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 2d

Protect Your Privacy Before You Divorce with the Click of a Button

If you and your spouse are in the process of divorcing, one of the first things you should do is protect your privacy. Due to features like...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 2d

New York’s Department of Financial Services Fines Eight Auto Insurance Companies Over $19M for Cybersecurity Violations

On October 14, 2025, New York’s Department of Financial Services (DFS) fined eight auto insurance companies for violating its cybersecurity...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 2d

NYDFS Issues Guidance on Managing Risks Related to Third-Party Service Providers

On October 21, 2025, the New York Department of Financial Services (“NYDFS”) published an Industry Letter (the “Letter”) outlining guidance on...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 2d

When it Rains it Pours: Lessons for Businesses Following the AWS Service Disruption

On October 21, 2025, much of the internet stopped behaving as expected. The largest cloud provider in the world, Amazon Web Services (AWS),...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 2d

Singapore releases draft quantum and agentic AI governance frameworks

During International Cyber Week 2025, Minister for Digital Development and Information Josephine Teo, unveiled a suite of draft frameworks...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 3d

Escroqueries au moyen de noms de domaine trompeurs : Partie II – Pratiques exemplaires en matière de prévention

Le nom de domaine est devenu un des éléments clés d’une marque, permettant au public d’identifier facilement le site Web et l’adresse courriel...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 3d

Fourth Circuit Finds Public Disclosure Required for Standing in Data Breach Case

Courts are concluding that not all data breaches should result in a lawsuit. Businesses need to consider causation and damages when responding to...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 3d

New CCPA Rules Are Here: Is Your Business Ready for What’s Next?

In a significant step toward strengthening consumer privacy protections, the California Privacy Protection Agency (CPPA) board has officially...

www.jdsupra.com

Cybersecurity Law @cybersecuritylaw.bsky.social · 3d

China Monthly Data Protection Update - October 2025

This monthly report outlines key developments in China’s data protection sector for October. The following events merit special attention: China...

www.jdsupra.com