On the Connect on Tech blog, Justine Phillips, Sylwia Lis, and Alex Lamy have published a post about export control considerations that companies should keep in mind when managing cyber incidents and data exfiltration.  The blog, “Cyber Transparency, Risk & Sanctions: How Cyber Incidents Give Rise to Export Control Issues,” can be found here.

Author

Justine focuses her practice on both proactive and reactive cybersecurity and data privacy services, representing clients in matters related to information governance, diligence in acquisitions and investments, incident preparedness and response, the California Consumer Privacy Act, privacy litigation, and cyber litigation.

Author

Ms. Lis has extensive experience advising companies on US laws relating to exports and reexports of commercial goods and technology, defense trade controls and trade sanctions — including licensing, regulatory interpretations, compliance programs and enforcement matters. She also has advised clients on national security reviews of foreign investment administered by the Committee on Foreign Investment in the United States (CFIUS), including CFIUS-related due diligence, risk assessment, and representation before the CFIUS agencies.

Author

Alex advises clients on compliance with US export controls, trade and economic sanctions, export controls (Export Administration Regulations (EAR); International Traffic in Arms Regulations (ITAR)) and antiboycott controls. He counsels on and prepares filings to submit to the US Government's Committee on Foreign Investment in the United States (CFIUS) with respect to the acquisition of US enterprises by non-US interests. Moreover, Alex advises US and non-US companies in the context of licensing, enforcement actions, internal investigations, compliance audits, mergers and acquisitions and other cross-border transactions, and the design, implementation, and administration of compliance programs. He has negotiated enforcement settlements related to both US sanctions and the EAR.