NYC employers will soon be required to include a minimum and maximum salary on all job postings for positions performed within the City. As we previously reported, the City Council passed Int. 1208-B (Law) on December 15, 2021, and due to new NYC mayor Eric Adam’s inaction within the 30-day veto period, it became a law as of January 15, 2022. Beginning May 15, 2022, the Law requires employers with four or more employees to include a “good faith” minimum and maximum salary range on for all advertised NYC job, promotion and transfer opportunities. Additionally, the Law makes the failure to include salary range an unlawful discriminatory practice under the City’s Human Rights Law.

Continue Reading NYC Job Postings Must Include Salary Ranges Effective May 15, 2022

Recent data thefts and systems intrusions, particularly with respect to ransomware, have assured that cybersecurity is top of mind for corporate executives and compliance officials. We at EBG have tried to keep you up to date with respect to legislative, regulatory and litigation developments and recommended best practices and procedures.

As we close out the year, we all should remain mindful that cyber criminals, especially those who are supported or protected by foreign adversaries, have little incentive to rest up during the holidays.

Continue Reading Best Practices to Protect Against Increased Cyber Threats During the Holiday Season

The Cybersecurity & Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST) jointly published a new resource as part of their ongoing efforts to promote awareness of, and help organizations defend against, supply chain risks. The publication, Defending Against Software Supply Chain Attacks, provides recommendations for software customers and vendors

A recently discovered security vulnerability potentially affecting at least 100 million Internet of Things (“IoT”) devices[1] highlights the importance of the newly enacted IoT Cybersecurity Improvement Act of 2020 (the “IoT Act”). Researchers at the security firms Forescout Research Labs and JSOF Research Labs have jointly published a report detailing a security vulnerability known

As featured in #WorkforceWednesday:  Here’s a rundown of some of the top developments in employment law and workforce management this week:

Guidance for Mitigating Retirement Plan Cybersecurity Risk

Last week, the U.S. Department of Labor’s Employee Benefits Security Administration issued its first cybersecurity best practices guidance for retirement plans. To assist plan sponsors and fiduciaries

Enacted on December 4, 2020, the Internet of Things Cybersecurity Improvement Act of 2020 (the “IoT Act”) is expected to dramatically improve the cybersecurity of the ubiquitous IoT devices.[1] With IoT devices on track to exceed 21.5 billion by 2025, the IoT Act mandates cybersecurity standards and guidelines for the acquisition and use by

On January 20, 2021, Mayor Jim Kenney signed legislation amending the Philadelphia Fair Practices Ordinance, which prohibits covered employers from procuring, considering, or otherwise using a job applicant’s or employee’s credit-related information in connection with hiring, discharge, tenure, promotion, discipline, or consideration of any other term, condition, or privilege of employment with respect to

In our previous blog, we featured the California Privacy Rights Act’s Enhanced Cybersecurity Safeguards.[1] We now highlight significant privacy safeguards under the California Privacy Rights Act (“CPRA”) that will require advance planning in preparation for its January 1, 2023 effective date.[2] These new requirements will impact the collection and use of personal

The California Privacy Rights Act (“CPRA”) leaps forward on cybersecurity by amending the California Consumer Privacy Act (“CCPA”) to impose enhanced protections. The CPRA enhancements apply to “for profit” companies and other organizations: (a) with more than $25 million in gross revenues in the preceding calendar year, or (b) that annually buy, sell or share