Tech & Sourcing @ Morgan Lewis

As more and more SaaS providers, in digital health, fintech, and other industries, look for ways to integrate with and offer third-party applications (in their quest for powerful network effects), they eventually reach a point where the reality contemplated by their original standard terms and the world (or metaverse) of their now-envisioned business model diverge.

In late 2021, the Luxembourg Commission de Surveillance du Secteur Financier (CSSF) published Circular CSSF 21/785 (the Circular), which introduced a more relaxed approach on the communication requirements in relation to material IT outsourcing (including to cloud-based infrastructures).

The US Securities and Exchange Commission (SEC) on March 9 proposed new rules to enhance and standardize disclosures relating to the risk management, strategy, governance, and incident reporting requirements of cybersecurity applicable to public companies (registrants).

The White House issued an executive order on March 9 relating to the responsible development of digital assets in the United States. This executive order outlines the first ever whole-of-government approach to both addressing the risks of digital assets and maximizing the potential benefits.

The UK Financial Conduct Authority (FCA) released a statement on February 14 confirming a series of changes to potentially unfair contract terms that had been agreed with four of the largest providers of Buy Now, Pay Later (BNPL) products operating in the United Kingdom.

The Bank of England (Bank) and the UK Financial Conduct Authority (FCA) published their final report of discussions from the UK Artificial Intelligence Public-Private Forum on February 17. Over quarterly meetings and several workshops conducted since October 2020, the Bank and the FCA jointly facilitated dialogue between the public sector, the private sector, and academia in order to deepen their collective understanding of artificial intelligence (AI) and explore how to support the safe adoption of AI. This initiative was incorporated into the UK National AI Strategy.

Various Chinese regulators announced a blanket ban on all cryptocurrency transactions and mining, the latest in a concerted effort to address illicit activities conducted using digital assets. The announcement on September 24, 2021, authored by a group of agencies including the China Securities Regulatory Commission and the People’s Bank of China, among others, represents the government’s most direct and sweeping action against cryptocurrencies to date. “Virtual currency derivative transactions are all illegal financial activities and are strictly prohibited,” the People’s Bank of China said on its website.

As part of our Spotlight series, we connect with Jeff Boujoukos, the leader of Morgan Lewis’s securities enforcement practice, to discuss the current and future state of affairs of the regulation and enforcement activities of the US Securities and Exchange Commission (SEC) regarding cryptocurrency and initial coin offerings. Jeff points to recent cases and statements that may impact and shape the cryptocurrency market going forward.

As part of our Spotlight series, we connect with Andrew J. Gray IV, a partner in Morgan Lewis’s IP-Technology group, to discuss the recent focus on embedded copyright cases based on a court’s unwillingness to apply the server test. Andrew gives us his thoughts on recent developments and what companies may want to think about when embedding social media content (or other content) into its own.

We recently highlighted the Morgan Lewis financial services team’s overview of proposed guidance released by the three federal banking agencies with respect to third-party relationships within the fintech industry. The federal banking agencies, though, are not alone when it comes to guidance on third-party vendors.