- EU CRA - https://en.wikipedia.org/wiki/CyberResilienceAct - its impact on bringing products to market and the challenges of enforcing such laws that require products to be "Secure"
- Recent legislation on disputes for federal agency fines - Chevron deference rule - supreme court decision, uncertainty, more or less clarity - proven in the first court case? opens to more litigation -https://www.nrdc.org/stories/what-happens-if-supreme-court-ends-chevron-deference
- Breach disclosure laws - mandatory disclosure rules from the SEC - https://www.sec.gov/newsroom/press-releases/2024-31
- Defcon cease and desist - “Copyright Act, the Defend Trade Secret Acts, the Computer Fraud and Abuse Act, and the Digital Millennium Copyright Act” - https://securityledger.com/2024/08/a-digital-lock-maker-tried-to-squash-a-def-con-talk-it-happened-anyway-heres-why/
Lee Kim, JD, CISSP, CIPP/US, is Principal of Keytera, where she advises senior executives on cybersecurity, artificial intelligence, privacy, and governance strategy. She serves as faculty with IANS Research and Practising Law Institute (PLI) and contributes to the SANS Institute. Previously, she served as Senior Principal of Cybersecurity and Privacy, Interim Senior Counsel, and GDPR Officer at the Healthcare Information and Management Systems Society (HIMSS). Lee is the author of Healthcare Cybersecurity, Privacy, and Data Protection: Present and Future (Routledge, 2026). She also authored “Safeguarding India’s Digital Health: A Framework for Cybersecure Healthcare Infrastructure” in partnership with the Data Security Council of India. Lee is a licensed attorney in the District of Columbia and the Commonwealth of Pennsylvania, a registered U.S. patent attorney, and an AV Preeminent peer-review rated attorney. Lee serves on the board of InfraGard Northern Capital Region. She previously served as a team leader and analyst in the U.S. Department of Homeland Security’s Public-Private Analytic Exchange Program. Her federal cybersecurity policy work includes drafting language that became Section 405 of the Cybersecurity Information Sharing Act of 2015 (currently in force as federal law). She also contributed public comments on the NIST Cybersecurity Framework and was invited by NIST to speak at NIST CSF 2.0 Workshop #3. As a sought-after speaker, Lee addresses cybersecurity, privacy, artificial intelligence, governance, and risk for audiences around the world. She also provides expert commentary to major media outlets, including the Associated Press, USA Today, WIRED, Forbes, Politico, Axios, National Public Radio, and the Canadian Broadcasting Corporation.
