Expert Analysis

• AI Risks May Recalibrate 'Reasonable Security' Standards

  

  A definitive answer to what constitutes reasonable vulnerability management in the age of artificial intelligence is still emerging, but the answer is likely less a reset of the standard than a recalibration of how organizations meet it, say Scott Loughlin at Hogan Lovells and Mike Priest at Globe Life.

• Accenture's FCA Deal Shows DEI Risks For Gov't Contractors

  

  The U.S. Department of Justice recently settled allegations that Accenture falsely certified compliance with antidiscrimination requirements in its federal contracts, underscoring how diversity goals can become a False Claims Act issue when the company requests payment from the government, say attorneys at Bass Berry.

• DOJ Directive Gives Contractors A Fraud Risk Road Map

  

  For government contractors, the 10 factors described in the U.S. Department of Justice's recent corporate fraud enforcement directive function as a de facto scoring rubric for internal audits that mirrors what prosecutors will prioritize, say attorneys at Spencer Fane.

• Key Risk Assessment Gaps To Note From NY Cyber Guidance

  

  Covered entities should take a fresh look at the compliance gaps flagged in recent New York State Department of Financial Services guidance on "deficient cybersecurity programs," particularly around scope, asset inventories and documentation, say attorneys at Mayer Brown.

• Where SEC's Transfer Agent Plan Would Change Compliance

  

  The U.S. Securities and Exchange Commission’s recent proposal to update the federal regulatory framework for transfer agents would comprehensively modernize the old task-specific regime by centering speed, operational resilience, compliance governance and technology-neutral recordkeeping, say attorneys at Morgan Lewis.

• Open Issues After 2nd Circ.'s Airport Phone Search Ruling

  

  While the Second Circuit’s recent U.S. v. Alisigwe decision confirms border agents' broad authority to conduct routine manual cellphone searches at ports of entry, significant questions remain about more wide-ranging forensic searches at the border, say attorneys at Baker Botts.

• FTC's Changing Model Raises Questions About Its Mission

  

  Federal Trade Commission leaders have recently sketched a vision of an agency that continues an enforcement role distinct from the U.S. Department of Justice's, even as a shift toward greater presidential control makes enforcement more responsive to changes in administrations, say attorneys at Wiley.

• 2nd Circ. EFAA Ruling Shifts Employer Litigation Strategy

  

  In Diaz-Roa v. Hermes Law, the Second Circuit recently held that, under the Ending Forced Arbitration of Sexual Assault and Sexual Harassment Act, employers can't carve out nonharassment claims and send them to arbitration, which has implications for discovery, litigation costs and resolution strategy in EFAA-covered disputes, say attorneys at Krevolin Horst.

• The Future Of PCAOB Enforcement After Post-Jarkesy Win

  

  While the Public Company Accounting Oversight Board recently defeated procedural and structural challenges to its enforcement program in D.C. federal court, it's unclear what claims and sanctions the PCAOB can bring against respondents — and whether it's interested in instituting disciplinary proceedings generally, says Mike Plotnick at King & Spalding.

• DC Circ. Ruling Clarifies Standards For Buy America Waivers

  

  The D.C. Circuit's recent decision to uphold a Federal Railroad Administration Buy America waiver offers clarifying guidance about assessing domestic availability, distinguishing manufacturing capabilities from future production plans and creating a well-supported administrative record, says Todd Overman at Bass Berry.

• Uniting BSA, Sanctions Compliance As Treasury Targets Iran

  

  The past 18 months of Treasury Department policies demonstrate expectations that financial institutions not merely obey sanctions against Iran, but also help expose how it moves money, making it essential that banks eliminate silos between their Bank Secrecy Act and sanctions compliance teams for an integrated response, says Jonathan Harrington at Bradley Arant.

• Digging Into Dems' Letter On Subpoena Secrecy Demands

  

  Lawmakers’ recent letter arguing that federal agencies’ use of boilerplate nondisclosure language in subpoenas pressures recipients into silence may lead to a significant overhaul of the current framework, but in the meantime, companies should review their rights and options, say attorneys at Crowell & Moring.

• How Bank Lobby's Suit Tests OCC's Crypto Charter Powers

  

  The Independent Community Bankers of America’s recent lawsuit challenging the Office of the Comptroller of the Currency’s ability to charter cryptocurrency companies marks another chapter in the struggle over the appropriate regulatory framework for digital assets, while raising a classic administrative law question at its most basic level, say attorneys at Ballard Spahr.

• Bribery Verdict Offers Guide To Post-Pause FCPA Priorities

  

  A former Goldman Sachs investment banker's recent Foreign Corrupt Practices Act conviction offers insights into how the U.S. Department of Justice is applying its FCPA guidelines following the Trump administration's 2025 pause on enforcement, and illustrates the importance of a company’s escalation procedures and follow-through, say attorneys at Debevoise.

• 3 Steps To Mitigate The Cyber Risks From Employee AI Use

  

  Recent data showing a doubling in breaches tied to employee use of unapproved AI tools demonstrates a convergence of cybersecurity risk, data privacy exposure and legal liability that workplace policies don't often address, but business leaders can get ahead of these risks, say attorneys at Ogletree.