DoD Contractors Required to Meet Cybersecurity Requirements by Year End

The window for Department of Defense (DoD) contractors to bring themselves into compliance with cybersecurity requirements is closing. Specifically, changes to the Defense Federal Acquisition Regulation Supplement (DFARS) published in late 2016 require that DoD contractors and subcontractors provide “adequate security” on “covered information systems.” The new rule also imposes […]

GDPR for Employers

Who is covered? If a company has EU-based employees whose behaviour it “monitors” (see below) it will need to take steps to ensure that it is compliant with the GDPR when it comes into force in May 2018. “Monitoring” in an employment context is not defined in the GDPR itself […]

Introduction to Europe’s General Data Protection Regulation

What is it? The GDPR is a European law that will govern how companies (whether EU-based or not) use personal data. It replaces the existing law on use of personal data and comes into force on 25 May 2018. Many aspects of the existing law will remain in place, including the data […]