Demian Ahn

White House Releases National Cybersecurity Strategy: Key Takeaways for the Private Sector

By Beth George, Megan Kayo, Maneesha Mithal, Demian Ahn and Alejandra Lynberg on March 15, 2023 Posted in Cybersecurity

On March 2, 2023, the White House released its National Cybersecurity Strategy (the Strategy). The Strategy sets out ambitious goals for the federal government to hold countries accountable for irresponsible behavior in cyberspace and to disrupt the networks of criminals behind cyberattacks. It also seeks to establish, harmonize, and streamline regulations to secure critical infrastructure, as well … Continue Reading

DOJ Acknowledges Limits to the CFAA, but Questions (and Possible Civil Liability) Remain for Security Researchers and Others

By Demian Ahn and Nick Contarino on May 25, 2022 Posted in Privacy, Regulatory

On May 19, 2022, the U.S. Department of Justice (DOJ) revised its policy regarding charging decisions under the Computer Fraud and Abuse Act (CFAA). The new policy makes clear, “for the first time,” that the DOJ “should decline prosecution” of “good faith” security research, even if said research involves a technical violation of the CFAA.1 The … Continue Reading