Five major changes to the regulation of cybersecurity in the UK under the Cyber Security and Resilience Bill

As the UK Government has recognized, cyber incidents—such as Jaguar Land Rover, Marks and Spencer, Royal Mail and the British Library—are costing UK businesses billions annually and causing severe disruption. The Government recognizes that cybersecurity is a critical enabler of economic growth (“we cannot have growth without stability”), and that the current laws have “fallen out of date and are insufficient to tackle the cyber threats faced by the UK.” Accordingly the UK Government this week published its long-awaited Cyber … Read the rest

FTC Finalizes Order with GoDaddy over Data Security Failures

The Federal Trade Commission has finalized an order with GoDaddy settling allegations that the webhosting provider misled consumers by failing to implement data security protections, which led to several data breaches.

The FTC alleged in January 2025 that despite claiming it provides “award-winning security,”  GoDaddy failed to implement standard data security tools and practices to protect customers’ websites and data. For example, it failed to use multi-factor authentication, monitor for security threats, and secure connections to its consumer data. These failures … Read the rest

So What Goes with Social Security?

We’ve tried staying away from this subject because it seems so political. The Democrats are shreiking that the Republicans are about to “gut” Social Security and Medicare. The Republicans flatly deny that. Meanwhile both parties joined to pass a Social Security Fairness Act that increased benefits for some federal workers. The effect, according to the Congressional Budget Office (CBO) was to advance the time bomb of social security insolvency. Letter to the Honorable Chuck Grassley about the long-term effects of … Read the rest

For Limited Use Only: Guidance on National Security Delay Determinations under the SEC Cyber Reporting Rule

On December 12, 2023, the Department of Justice (“DOJ”) issued guidance related to the process by which companies may request the United States Attorney General authorize delays of cyber incident disclosures, pursuant to a new Securities and Exchange Commission (“SEC”) rule. As a reminder, the SEC rule (which went into effect on Dec. 18, 2023) requires companies to disclose material cyber incidents via Form 8-K within four days of making a materiality determination. Our colleagues previously discussed the SEC rule … Read the rest