1. Home
  2. |Insights
  3. |Beating Others to the Punch, DHS Proposes CUI Changes to Acquisition Regulations

Beating Others to the Punch, DHS Proposes CUI Changes to Acquisition Regulations

Client Alert | 1 min read | 02.07.17

On the last full day of the Obama Administration, the Department of Homeland Security (DHS) published a proposed rule that would make several amendments to the Homeland Security Acquisition Regulation (HSAR) regarding Controlled Unclassified Information (CUI). Despite recent developments, the proposed rule is open for comment until March 20, 2017, and seeks to impose several obligations, including: (1) contractors handling CUI under a contract must be in compliance with a bevy of DHS policies and procedures at the time of contract award; (2) contractors operating federal information systems must meet numerous information security obligations prior to handling CUI on those systems; (3) contractors must report known or suspected incidents affecting CUI within one to eight hours, depending on the type of CUI at issue; and (4) contractors must adhere to specific breach notification and credit monitoring requirements in response to incidents affecting personally identifiable information (PII), a subset of CUI.

Contacts

Insights

Client Alert | 5 min read | 08.21.26

FTC Proposes Enforcement Policy Statement on Personalized Pricing: What Businesses Need to Know

On August 19, 2026, the Federal Trade Commission (FTC) announced a proposed Enforcement Policy Statement on personalized pricing — the practice of companies using consumers’ personal data to set individualized prices, discounts, coupons, or other incentives. The proposed statement, which is open for public comment for 30 days following publication in the Federal Register, marks a major step up in the FTC’s focus on data-driven pricing strategies and puts businesses across industries on notice that undisclosed or inadequately disclosed personalized pricing will not be tolerated. Importantly, while the proposed statement is not a binding legal requirement and does not create new legal obligations, it serves as an enforcement warning that the FTC is prepared to use its existing enforcement authority under Section 5 of the FTC Act (Section 5) and is also a potential harbinger of rulemaking. Businesses that engage in — or are considering — personalized pricing should carefully assess their disclosure practices and data collection procedures against the standards articulated in this statement....

View All Insights