Today the SEC filed a complaint against SolarWinds Corporation and its CISO for fraud and internal control failures relating to allegedly known cybersecurity risks and … Continued
There is mixed authority on whether the Sarbanes-Oxley whistleblower protection law protects disclosures about inadequate cybersecurity. Last year, in an unpublished decision, the Third Circuit … Continued
Data Privacy Whistleblowing The recent explosion of state data privacy laws demonstrates the need for comprehensive federal data privacy regulation, which must include protection for … Continued
Complying with information security and data privacy requirements is a fundamental duty of government contractors and grantees and is vital for the protection … Continued
Yesterday Senators Maria Cantwell, Brian Schatz, Amy Klobuchar, and Ed Markey introduced comprehensive federal online privacy legislation to establish privacy rights, outlaw harmful and deceptive … Continued
On July 24, 2019, the SEC announced that Facebook, Inc. has agreed to pay $100 million to resolve charges that Facebook made misleading disclosures regarding … Continued
Yes, a disclosure about cybersecurity that leads to an enforcement action in which the SEC collects one million dollars or more in penalties will qualify … Continued
Guide for Cybersecurity Whistleblowers Whistleblower lawyer Dallas Hammer has published a Practitioner’s Guide to Cybersecurity Whistleblowing. The guide can be downloaded here. The guide summarizes rewards and … Continued