1、Addressing Cyber&Data Privacy in 2023 A NAVEX EBOOKTable of ContentsTable of Contents4A Recap of U.S.Data Privacy Laws Taking Effect in 2023JACLYN JAEGER9CPRA Regulations&Requirements:Understanding the California Privacy Rights Act JACLYN JAEGER14Privacy in 2023 What to Expect and How to Prepare JAM

2、ES CASTRO-EDWARDS AND NANCY PERKINS21The SEC Wants You to Do Better at Disclosing Cybersecurity BreachesMATT KELLY24How CISOs Can Start Talking About ChatGPTMATT KELLY3NAVEX IntroductionThe ever-evolving landscape of cybersecurity risks and data privacy legislation is a challenge for many organizati

3、ons to stay ahead of.To help address the growing threat,NAVEX is committed to sharing up-to-date resources to help equip CISOs,IT leaders,and risk and compliance officers with their efforts to protect their enterprise.This collection of articles covers some of the privacy legislation that is either

4、already in or taking effect soon across the world.The purpose is to give context around cybersecurity,data protection,and compliance with global privacy regulations to help organizations better mature their cybersecurity and data protection posture.4NAVEX BY:JACLYN JAEGER Freelance JournalistA Recap

5、 of U.S.Data Privacy Laws Taking Effect in 2023Last year was a busy one for data privacy legislation across the United States,and with many states consumer data privacy laws in effect this year,now is the time to reassess where more changes may be needed in order to prepare.According to an analysis

6、by the National Conference of State Legislatures(NCSL),“at least 35 states and the District of Columbia introduced or considered almost 200 consumer privacy bills in 2022.”Comprehensive(omnibus)privacy legislation was the most common type of bill considered,introduced in at 25 least states and the D