Regulatory Compliance Workshops

Navigate Global Regulations with Confidence – Avoid Fines, Secure Contracts, Build Resilience

 

In today's high-stakes regulatory landscape, non-compliance isn't just a risk—it's a barrier to growth and a legal exposure.

 

There's a wave of new regulatory standards that must be addressed from the boardroom to the shop floor. 

​

Securities & Financial

• SEC Cybersecurity Disclosure Rules — Boards are now personally accountable for cyber oversight; directors are expected to exercise active supervision rather than simply receive updates, with a compliance deadline of June 3, 2026 for Regulation S-P amendments. Governance-intelligence

• SEC Regulation S-P (amended) — Requires written cyber-related policies and procedures, notice to individuals within 30 days absent a "no-harm" finding, increased recordkeeping, and stringent third-party risk management requirements. Paul, Weiss

• Dodd-Frank Act — systemic risk governance for financial institutions

• Gramm-Leach-Bliley Act (GLBA) — financial data privacy and safeguards

• Sarbanes-Oxley Act (SOX) — internal controls and financial reporting governance

​

Critical Infrastructure & Defense

• CIRCIA (Cyber Incident Reporting for Critical Infrastructure Act) — CISA delayed implementation of new incident reporting requirements to an expected date of May 2026, leaving state-specific reporting rules to govern the space in the interim. Paul, Weiss

• CMMC (Cybersecurity Maturity Model Certification) — The DOD's final CMMC rule, issued in November 2025, formally ties contract eligibility to demonstrated cybersecurity maturity across three levels aligned to the sensitivity of federal contract information. Morgan Lewis

• FISMA (Federal Information Security Modernization Act) — federal agency cyber standards

• HIPAA/HITECH — healthcare data security and breach notification

• Data & Privacy

• DOJ Bulk Data Rule (Data Security Program) — Effective April and October 2025, this prohibits or restricts the provision of U.S. bulk sensitive personal data and government-related data to "countries of concern" including China, Russia, and Iran. Paul, Weiss

• COPPA (amended 2025) — The FTC published final amendments in April 2025, which took effect June 23, 2025, expanding children's online privacy protections. White & Case LLP

• FTC Act (Section 5) — unfair/deceptive practices enforcement in data security

 

327 Solutions Regulatory Compliance Workshops deliver hands-on, actionable training to help you implement and sustain compliance globally.