1. Home
  2. |Insights
  3. |IoT Goes Federal under Newly Signed Law

IoT Goes Federal under Newly Signed Law

Client Alert | 1 min read | 12.10.20

Last week, the President signed the Internet of Things (IoT) Cybersecurity Improvement Act into law, kicking off a multi-year process that will culminate in the first-ever federal requirements for IoT devices. Under the law, the National Institute of Standards & Technology (NIST) is now charged with drafting and finalizing security requirements for IoT devices, as well as guidelines for managing disclosures about those devices’ security vulnerabilities. In two short years, the federal government will then be prohibited from procuring IoT devices unless (1) the devices meet the pending NIST requirements; or (2) the devices are granted a formal waiver by an agency Chief Information Officer. In addition to creating yet another cybersecurity regime for the government contracting community, the law will create a new benchmark for consumer-facing companies to consider when assessing and complying with the growing number of states imposing their own “reasonable security” requirements for IoT devices.

Insights

Client Alert | 4 min read | 07.02.25

FTC Orders Divestitures in Retail Fuel Outlet Deal and Signals a Return to More Standard Remedy Discussions

Merger consent orders are back at the FTC, and the FTC’s most recent action showcases how the current leadership is analyzing divestiture proposals. Last week, the FTC approved a proposed consent agreement in Alimentation Couche-Tard Inc.’s (ACT) acquisition of retail fuel outlets from Giant Eagle, Inc. that paired standard retail divestitures with a “prior notice” requirement that ACT notify the agency of future acquisitions in certain markets regardless of size. This FTC has signaled greater acceptance of remedies than the prior administration, and this most recent consent puts that on display, with Commissioner Meador providing merging parties guidance on designing effective remedies....