Lexology January 29, 2025
As the landscape of cyber threats continues to evolve, federal agencies are actively updating regulations to protect sensitive information better. The U.S. Federal Trade Commission (FTC) recently published new guidelines for businesses, recommending security practices in software, data management, and consumer product design. Meanwhile, the U.S. Department of Health and Human Services (HHS) published a draft of updates to HIPAA’s Security Rule for public comment.
The FTC’s “Start with Security: A Guide for Business” offers practical advice for businesses on cybersecurity in their operations. The guide aligns with federal initiatives to protect sensitive data by emphasizing administrative, physical, and technical safeguards. It highlights the importance of managing risks, implementing access controls, and providing security awareness training to information system users....