Five Lawsuits and Counting: A Compliance Breakdown of the Mercor Data Breach Litigation
In the span of a single week, five separate class action lawsuits landed in federal courts against Mercor.io Corporation. The complaints vary in scope...
Compliance & Regulatory Articles
712 articles on privacy laws, security frameworks, and regulatory compliance.
Fake Compliance, Stolen Credentials, and 4 Terabytes of AI Secrets: Inside the Class Action That Connects Mercor, LiteLLM, and Delve
A supply chain attack, a compliance fraud scandal, and invasive contractor surveillance converge in a single federal lawsuit — exposing the fragile tr...
HIPAA Security Rule Overhaul 2026: What the Most Significant Update in Two Decades Means for Healthcare Organizations
The proposed 2026 HIPAA Security Rule update is the most significant revision to federal healthcare cybersecurity requirements in over two decades. Ma...
The White House AI Framework: What Compliance Teams, Legal Professionals, and Security Leaders Must Do Now
The Trump administration's March 2026 National Policy Framework for Artificial Intelligence signals the first major push toward a unified federal AI l...
Why CMMC Compliance Road Maps Fall Behind Schedule — And What Defense Contractors Must Do Differently
Most CMMC compliance programs miss their target timelines — not because of isolated execution failures, but because of systemic planning assumptions t...
EU Data Regulators Back Streamlining NIS2 Cybersecurity Compliance — But Warn Cooperation With ENISA Must Improve
Europe's key data privacy regulators have voiced support for simplifying compliance and reporting requirements under NIS2, signaling a potential shift...
FDA Updates Medical Device Cybersecurity Guidance: What Manufacturers Must Know About the 2026 Premarket Submission Requirements
The FDA has released an updated cybersecurity guidance for medical device premarket submissions, aligning with Quality Management System Regulation re...
The CPRA Cybersecurity Audit Mandate Is Now Active: What California Businesses Must Do in 2026
As of January 1, 2026, California businesses meeting CPRA thresholds must conduct annual, independent cybersecurity audits. Enforcement is already und...
Trump's 2026 National Cybersecurity Strategy: What the Shift from Compliance to Consequence Means for CISOs and Organizations
The Trump administration's March 2026 cyber strategy and executive order on cyber-enabled crime signal a fundamental policy pivot: less regulatory fri...
New York DFS Part 500: What the Compliance Certification Deadline Means for Regulated Entities in 2026
The New York Department of Financial Services has moved past the first compliance certification deadline under its amended Part 500 cybersecurity regu...
The $40 Billion AI Fraud Crisis: What Financial Compliance Teams Must Do Now
Your institution's fraud team is no longer fighting humans. It's fighting machines that never sleep, never make typos, and cost criminals almost nothi...
CCPA in the Age of AI: What the Perplexity Lawsuit Means for Privacy Compliance
A new class-action lawsuit alleges Perplexity AI secretly tracked users in incognito mode and shared their data with Meta and Google — in violation of...