Topic
Incident Response
217 published works
Privacy World
Capital One Objects to Magistrate Judge’s Ruling Its Forensic Report Discoverable: Here are the Practical Takeaways
As has been widely reported, a magistrate judge in the Eastern District of Virginia recently ordered Capital One to produce a forensic report prepared by the cybersecurity firm Mandiant, holding…
Data Counsel
Sixth Annual Data Security Incident Response Report Released – Managing Enterprise Risks and Leveraging Data in a Digital World
We are excited to present our sixth Data Security Incident Response Report (DSIR). We hope this issue finds you safe and healthy while working from home (WFH). Each year, we…
The CLS Blue Sky Blog
Skadden Discusses Cybersecurity and Incident Response During Coronavirus Pandemic
The spread of the novel coronavirus has upended Americans’ lives in a matter of months. While life outside has ground to a standstill in many regions of the country, much…
Eye On Privacy
Turn on the Camera Part Two: Are You Prepared to Handle a Breach Remotely and Do You Know Your Legal Security Obligations?
By Craig Cardon, Kari Rollins, Liisa Thomas, Rachel Tarko Hudson
During their COVID-19 preparations, companies are dusting off -and deploying- their business continuity plans. Also worth revisiting are incident response plans. Teams working remotely, if faced with a data breach,…
Ride the Lightning
Sedona Conference Issues Final Incident Response Plan
I've been meaning to cover this story for several weeks, but as my friend Doug Austin says, "So many stories, so little time." Hat tip to Doug who wrote about…
Ride the Lightning
Sedona Conferences Publishes Incident Response Guide
The Sedona Conference and its Working Group 11 on Data Security and Privacy Liability (WG11) have announced the publication of the January 2020 final version of The Sedona Conference Incident…
Password Protected
Effective Incident Response Requires Good Cyber Exercise—Is Your Company in Shape?
For years, corporate boards have hired third-party companies to conduct financial audits to assure that there is no fraud or other breaches of fiduciary responsibility by management. Cyber risks should…
Eye On Privacy
Maryland Adds Insurance Commissioner to Breach Notification Requirements
By Julia Kadish, Kari Rollins, Liisa Thomas
Effective October 1, 2019, organizations providing health insurance and related services must notify the Maryland Insurance Administration as part of its breach notification requirements. In August 2019, the Maryland Insurance Administration…
Privacy & Information Security Law Blog
Maryland Insurance Administration Announces New Breach Notification Requirements
On August 29, 2019, the Maryland Insurance Administration issued new breach notification requirements for entities that provide health insurance or related services. The new requirements will apply to insurers, non-profit health…
Proskauer on Privacy
The New SHIELD Act Changes Breach Notification Rules and Data Security Standards for New Yorkers’ Personal Information
By Ellen Moskowitz, Elizabeth (Betsy) Rosen Siegel
Reflecting the movement to toughen data security laws on a state-by-state basis, on July 25, 2019, Governor Cuomo signed into law the Stop Hacks and Improve Electronic Data Security Act…