The Data Security Program (DSP), a new regulatory regime imposing complex data compliance and security requirements — unlike any in existing U.S. law — took effect in part in April, with the final effective date being October 6. Its novelty and complexity may surprise many companies. Join Troutman Pepper Locke for a discussion of key best practices your company should be aware of regarding the DSP.

In this webinar, we will cover emerging industry-specific and general best practices, including around the following critical topics:

  • How to confirm your company is outside the scope of the DSP (or, when in scope, how to remove the company from the applicability of the DSP).
  • What companies are doing that believe they are not subject to the DSP – you may be surprised.
  • Industry-specific guidance for financial services, health care, insurance, and others.
  • Preparing for the audit – essential steps in light of the October 6, 2025, audit period start date.
  • Tips for contractual language.
  • CISA – how companies are enhancing security to prepare for and demonstrate compliance.
  • Next steps for navigating the road ahead.

A Q&A will follow the presentation.