Insights

London – June 11, 2026: Crowell & Moring Partner Emma Wright has been appointed to the UK Government's newly formed Digital ID Advisory Group, an independent body of experts convened by Right Honorable Darren Jones MP, to support the delivery of a national digital ID system that is inclusive, useful, and trusted. 

Washington – June 4, 2026: Crowell & Moring earned 92 individual rankings for 81 attorneys, as well as 48 national and statewide practice area rankings, in the Chambers USA 2026 guide. The Chambers guide ranks the country’s top law firms and lawyers through in-depth research, client interviews, and feedback from attorneys at peer firms. 

Washington – November 5, 2025: Crowell & Moring ranked nationally in 20 practice areas in the 2026 edition of Best Lawyers "Best Law Firms." In addition, the firm was ranked in 38 metropolitan categories. 

On July 26, 2023, the SEC finalized long-awaited disclosure rules (the “Final Rules”) regarding cybersecurity risk management, strategy, governance, and incidents by public companies that are subject to the reporting requirements of the Securities Exchange Act of 1934.  While the end results are substantially similar to rules proposed by the SEC in March 2022, there are some key distinctions. 

The risks faced by companies in light of new federal cybersecurity regulations are particularly acute for government contractors, who must also be aware of compounded exposure from the False Claims Act (FCA). The U.S. government is increasingly scrutinizing corporate cybersecurity programs, and companies are vulnerable to new risks of civil and criminal liability related to data breaches. The specter of individual criminal liability looms large since the 2022 conviction of the chief security officer at a leading rideshare company for actions related to his response to data breaches. And now, the SEC has charged the CISO of SolarWinds in his individual capacity with securities fraud related to the company’s cybersecurity regime. All companies—especially government contractors—should consider mitigating risk by auditing their cybersecurity protocols and updating their incident response plans.

With stronger rules requiring disclosure of cyber risk and cyber breaches, 2023 has seen heightened SEC enforcement of companies’ obligations in cyber breaches and, notably, enforcement charges brought directly against Chief Information Security Officers (CISOs).