Expert Analysis

• Key Risk Assessment Gaps To Note From NY Cyber Guidance

  

  Covered entities should take a fresh look at the compliance gaps flagged in recent New York State Department of Financial Services guidance on "deficient cybersecurity programs," particularly around scope, asset inventories and documentation, say attorneys at Mayer Brown.

• 2nd Circ. EFAA Ruling Shifts Employer Litigation Strategy

  

  In Diaz-Roa v. Hermes Law, the Second Circuit recently held that, under the Ending Forced Arbitration of Sexual Assault and Sexual Harassment Act, employers can't carve out nonharassment claims and send them to arbitration, which has implications for discovery, litigation costs and resolution strategy in EFAA-covered disputes, say attorneys at Krevolin Horst.

• Uniting BSA, Sanctions Compliance As Treasury Targets Iran

  

  The past 18 months of Treasury Department policies demonstrate expectations that financial institutions not merely obey sanctions against Iran, but also help expose how it moves money, making it essential that banks eliminate silos between their Bank Secrecy Act and sanctions compliance teams for an integrated response, says Jonathan Harrington at Bradley Arant.

• How Bank Lobby's Suit Tests OCC's Crypto Charter Powers

  

  The Independent Community Bankers of America’s recent lawsuit challenging the Office of the Comptroller of the Currency’s ability to charter cryptocurrency companies marks another chapter in the struggle over the appropriate regulatory framework for digital assets, while raising a classic administrative law question at its most basic level, say attorneys at Ballard Spahr.

• Bribery Verdict Offers Guide To Post-Pause FCPA Priorities

  

  A former Goldman Sachs investment banker's recent Foreign Corrupt Practices Act conviction offers insights into how the U.S. Department of Justice is applying its FCPA guidelines following the Trump administration's 2025 pause on enforcement, and illustrates the importance of a company’s escalation procedures and follow-through, say attorneys at Debevoise.

• 4 Steps For Cos. Amid Russia Sanctions Law Uncertainty

  

  Russian companies, their U.S. subsidiaries and businesses with Russian commercial relationships should take concrete steps to determine their exposure under ambiguous provisions of legislation that recently expanded the scope of U.S. sanctions, notwithstanding an Oct. 16 executive order waiving most of its restrictions, say attorneys at Wilk Auslander.

• New Calif. Law Ties Finance Contracts To State Licensing

  

  Under a California law taking effect in 2028, commercial financing licensing requirements have been substantially expanded — meaning that fintechs relying on limited regulatory enforcement will face risk from their own borrowers, who could use licensing failures to resist repayment, say attorneys at Husch Blackwell.

• How Viral Accusations Can Test Employers' Discipline Policies

  

  The employment fallout that appears to have followed a former Cornell University student's sexual assault lawsuit against seven fraternity members underscores that although employers often have freedom to fire employees over accusations, they must still make a defensible decision, says Michael Elkins at MLE Law.

• Opinion

  The SEC Crypto Proposal Rests On A Term No One Can Define

  

  The U.S. Securities and Exchange Commission's recently proposed Regulation Crypto Assets is its most ambitious attempt to set rules for the crypto industry, but its repeated use of the phrase "essential managerial efforts" means it perpetuates the uncertainty the regime is meant to cure, says Joseph A. Hall at Davis Polk.

• Navigating Dueling Regulations For Bank Investment Advisers

  

  Recent U.S. Securities and Exchange Commission examination findings show that investment advisory activities remain an active area of regulatory focus, and reinforce the need for banks to assess intersecting compliance obligations, say attorneys at Fredrikson.

• Series

  Being In The Peace Corps Made Me A Better Lawyer

  

  When I served in the Peace Corps, the people of the West African village where I was stationed helped me acclimate to my new surroundings and enabled me to develop problem-solving, teamwork and empathy skills that have bolstered my legal practice far beyond the ability to offer technical advice, says Brian Bewley at McGuireWoods.

• Opening Up Fraud Talks With Customers After SAR Guidance

  

  Federal financial regulators’ recent statement that the Bank Secrecy Act permits financial institutions to discuss potential fraud with customers, provided they don’t reveal the existence of any suspicious activity reports, means banks that have been tighter-lipped than regulations require can consider passing additional useful information on to customers, say attorneys at MoFo.

• Unpacking FDIC's Modernized Bank Merger Review Rules

  

  The Federal Deposit Insurance Corp.'s proposed revisions to its Bank Merger Act review process are a shift from its more skeptical prior posture toward a more structured and transaction-facilitative approach, though some broader uncertainty remains concerning antitrust alignment with the U.S. Department of Justice, say attorneys at Simpson Thacher.

• OCC Plan May Bring Data Sharing Flexibility, Diligence Issues

  

  The Office of the Comptroller of the Currency's recent proposal to overhaul its supervisory information sharing regime for the first time in decades would provide important flexibility to banks, but it could create new issues around confidentiality agreements, disclosure controls and diligence processes, say attorneys at Simpson Thacher.

• Tips For Employers As Calif. Court Limits Harassment Liability

  

  Doe v. Wells Fargo appears to be the first published California appellate decision to determine that the harasser must have supervisory authority over the plaintiff to trigger strict liability, underscoring the value of accurately documenting job roles and reporting lines, says Ellen Connelly Cohen at Call & Jensen.