James Koenig

Executive Summary - The California Consumer Privacy Act’s (CCPA) cybersecurity audit regulations, finalized September 23, 2025, became effective January 1, 2026, establishing the first state privacy law of general...more The new Department of Justice (DOJ) Data Security Program (DSP) took effect on April 8....more Under the Department of Justice’s (DOJ) “Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons” rules (the Rules), allowing access outside the United States...more A groundbreaking new regulatory regime, imposing rules unlike any in existing U.S. law, may surprise many companies due to its sudden adoption and complexity. This article tries to simplify the changing regulatory landscape,...more