Key insights Keeping your sensitive data and systems secure is critical to your organization’s success. SOC 2 and HITRUST are two ways to have your organization’s security practices evaluated, and while they have many similarities, there are essential differences to consider. Better understand your risk and bring confidence to those you serve, whether your goal is to obtain a SOC 2 report or HITRUST certification. Data has become the most important asset for many organizations, so sharing that data in...

Read more

Times are getting harder for foreign investors in the EU! Member States are tightening their foreign direct investment control regimes (see our alert here), and national competition authorities are calling for more rigorous merger control enforcement (see our alert here). The European Commission (“Commission”) encourages Member States to refer to it non-notifiable transactions, and the proposed Digital Markets Act (DMA) shows the direction of the Commission’s intention to regulate (primarily US-based) gatekeepers in the digital markets (see our alert...

Read more

Five years after the European Commission first proposed its framework on public country-by-country reporting (pCBCR) to oblige large multinational companies to publicly disclose where they make their profits and where they pay their taxes, the EU’s co-legislators reached a final agreement on Tuesday evening (1 June). The transparency requirement is set to enter into force in early 2023.  After having been blocked by several countries in the Council since 2016, the current Portuguese Presidency of the Council of the EU,...

Read more