Part of the reason for the state involvement is that the federal government often is not enacting laws on these subjects, Morrison & Foerster's Andrew Serwin says. Many state governments have been ...

Collects and uses customer or employee personal information. Participates in an industry sector that is considered high risk or critical infrastructure. Offers securities as a publicly traded company.

Navigating the alphabet soup that is infosec compliance A survey of the compliance landscape (© Invictis Information Security Ltd.) PCI DSS, GLBA, SOX, ISO, COBIT, DPA, ITIL – When it comes to ...

This post-Enron law that aimed to protect investors by preventing fraudulent accounting and financial practices has major implications for data retention and security.