The Data Chronicles

This episode of The Data Chronicles focuses on insider threats in the hiring process.

Recent reports have highlighted a concerning trend where North Korean nationals seek and sometimes secure jobs in the United States and other Western countries using sophisticated methods to evade sanctions restrictions and potentially steal data. These developments have reignited discussions on how organizations should handle insider threats from sanctioned countries during recruitment.

Joining Scott Loughlin are Dan Ongaro, senior associate, and Landon Winkelvoss, co-founder of NISOS, a firm specializing in managed intelligence and digital investigations. Together, they share their insights, dissect the complexities of this issue, and propose strategies to enhance organizational security from insider threats, both foreign and domestic.

In this episode of The Data Chronicles, host Scott Loughlin is joined by counsel Dan Whitehead to dive into the evolving realm of cybersecurity regulation in the European Union (EU). Together, they explore the adoption of the Network and Information Security (NIS2) Directive, a cybersecurity framework set to impact a wide range of industries including tech, life sciences, and other critical infrastructure provided both within and outside the EU. The discussion delves into the evolving nature of cybersecurity law, highlighting the implications on security governance, board-level oversight, and incident reporting, along with the GDPR-level fines for non-compliance. Listen as these regulatory changes are dissected and learn about how organizations are looking to comply with these new standards in practice.

In this episode, host Scott Loughlin is joined by partners, Joke Bodewits and Nathan Salminen, to unpack the pressing questions surrounding the offensive and defensive use of AI in cybersecurity. Both Joke and Nathan are seasoned cybersecurity lawyers and regular guests of The Data Chronicles, and together they whether AI functions as a cyber weapon, its role in defense strategies, and the new cybersecurity challenges and vulnerabilities it presents. 

In this episode of The Data Chronicles, host Scott Loughlin is joined by senior associate Dan Ongaro to explore security researchers, in particular, how they differ from threat actors and best practices for handling security researchers effectively. Discussion includes bug bounties and other vulnerability disclosure programs to help organizations remain secure and responsive to legal implications of security researchers such as when researchers cross the line to potential incidents or breaches.

In this episode we discuss how AI is creating new legal issues in the already complex field of digital health. Join host Scott Loughlin and Melissa Bianchi as they explore the key regulatory frameworks and compliance issues surrounding AI in healthcare in the digital world and how many tech organizations – whether they think of themselves as healthcare companies or not – are now becoming digital health companies in the age of AI.

In this episode we dive into the intricate world of artificial intelligence and commercial contracting. Host Scott Loughlin is joined by David Toy to explore the nuances of AI in commercial contracting. Dave's expertise in technology, intellectual property, commercial contracting, and outsourcing has seen him negotiate every type of tech deal imaginable, and now it seems like AI is part of each of them.  New commercial issues are popping everywhere – from reps to indemnities – with no market standard yet in sight.

Artificial intelligence is not just a futuristic concept; it's a present-day reality that's transforming how we create, share, and protect intellectual property. In this episode host Scott Loughlin is joined by counsel, Lauren Cury, to discuss how AI is reshaping the landscape of copyright law. Together they examine both the challenges and opportunities it presents and the strategies companies can employ to stay ahead in this rapidly evolving field.

In this episode of The Data Chronicles, we explore the groundbreaking Colorado AI Act (CAIA), the first cross-sectoral AI governance law in the U.S. Host Scott Loughlin and senior associate Sophie Baum explore the implications of this pioneering legislation. Together they discuss the major provisions of the CAIA and highlight developer and deployer obligations, enforcement and rulemaking components of the bill and what companies need to do to prepare when CAIA goes into effect in February 2026.

In this episode of The Data Chronicles, we examine the role of law enforcement in cybersecurity. Host Scott Loughlin leads a discussion with Amit Kachhia-Patel, Assistant Special Agent in Charge (ASAC) overseeing the FBI New York Field Office’s cybersecurity squads, and Pete Marta, partner at Hogan Lovells, as they navigate how companies may leverage the expertise and resources of the FBI in a cyber crisis and explore the evolving landscape of cyber threats globally. Join us as we uncover the collaborative efforts between the private sector and law enforcement needed in combating cybercrime.

The U.S. Federal Communications Commission is once again top of mind for players in the digital economy. The FCC has reinstated net neutrality rules as part of Chairwoman Rosenworcel's push to play a larger role in network, cyber, and national security issues. In this episode, host Scott Loughlin is joined by senior counsel Charles Mathias and counsel John Castle, to discuss the privacy implications of the final rules, including how this policy could further restrict foreign access to data, and grant FCC authority over addressing cyber vulnerabilities and imposing other data protection obligations.