Congress Rolls Back FCC Privacy Regulations

On March 28, 2017, Congress passed legislation (S.J. Res. 34) that rolled back privacy regulations recently adopted by the Federal Communications Commission. The resolution passed the Senate by a vote of 50-48 and the House by a voted of 215 to 205. This is one of several sets of regulations Congress is rolling back under the authority of the Congressional Review Act of 1996. Under this statute, Congress can nullify administrative regulations by simply passing a joint resolution of disapproval.
Continue reading...

Comments on NYSDFS Cybersecurity Regulation Begin Pouring In

On September 28, 2016, the New York State Department of Financial Services (DFS) released for comment a proposed new regulation entitled Cybersecurity Requirements for Financial Services Companies (23 N.Y.C.R.R. Part 500). Various industry groups have offered comments and expressed concerns about some of its requirements. These concerns include the costs of compliance and the scope of entities regulated by the proposed rule. Among the organizations offering comments are the Excess Lines Association of New York (ELANY) and the American Association
Continue reading...

Credit Card Payment Coverage Declined: Cyberinsurer Not Obligated to Reimburse P.F. Chang’s for PCI Liability

In the most significant cyberinsurance coverage decision to date, an Arizona federal district court in P.F. Chang’s China Bistro v. Federal Insurance Co., No. CV-15-01322-PHX-SMM (D. Ari. May 31, 2016), granted summary judgment to Federal Insurance Company, acknowledging it had no duty to reimburse P.F. Chang’s China Bistro for payment card industry liability assessments under the CyberSecurity policy issued by Federal to P.F. Chang’s corporate parent. This decision represents a significant victory for cyberinsurers insofar as it upholds insurers’ marketing
Continue reading...