Drawing on lessons learned from thousands of incident responses, this GT Advisory examines the most common and consequential mistakes organizations make when responding to a data breach. From lack of preparation to missteps in customer notification, understanding these pitfalls is the first step toward a more effective response.
Continue Reading Cyber Incident Response: 10 Lessons Learned from Thousands of Breaches
GT Shareholder Jena M. Valdetero, co-chair of the firm’s U.S. Data Privacy and Cybersecurity Practice, will present the CLE webinar, “Maintaining Privilege in Data Breach Investigations: Best Practices and War Stories from Multimillion-dollar Breaches,” Dec. 19 at noon ET. This session will provide critical steps for protecting privilege during a data breach investigation
Jena M. Valdetero, Co-Chair of the firm’s Data Privacy and Cybersecurity Practice, and Steven M. Malina, a member of GT’s Litigation Practice, were quoted in a Dark Reading article titled “Orgs Face Major SEC Penalties for Failing to Disclose Breaches.”
Click here to read the full article, published by Dark Reading
As detailed in our July 2023 GT Alert, the Securities and Exchange Commission (SEC) now requires public companies to file a Form 8-K and disclose a material cybersecurity incident within four days of determining the incident’s materiality. Form 8-K Item 1.05(c) includes an exception to the four-day requirement: where disclosure poses a substantial risk
On Oct. 27, 2023, the Federal Trade Commission (FTC) amended its Standards for Safeguarding Customer Information (the Safeguards Rule), promulgated under the Gramm-Leach-Bliley Act (GLBA), to require financial institutions to provide notice to the FTC of data breaches that impact 500 or more consumers (the Amendment). This comes after the FTC’s major update to the
Greenberg Traurig is a sponsor of the 2023 Privacy + Security Forum Fall Academy at the George Washington University Nov. 8-10, 2023. The conference will break down the silos of privacy and security and bring together seasoned thought leaders for in-depth sessions and workshops designed to deliver practical takeaways for conference participants.
Greenberg Traurig Shareholder
On July 26, 2023, the Securities and Exchange Commission (SEC) adopted the long-awaited final rule requiring that public companies disclose information about cybersecurity incidents within four business days of determining the incident is material. GT wrote about the proposed rule shortly after it was released in March 2022. For context, Commissioner Caroline Crenshaw noted, in
Rebekah S. Guyon, a member of GT’s Litigation and Data Privacy & Cybersecurity Practices, was quoted in a Corporate Counsel article titled “Suits Flooding Courts Seize on Decades-Old Wiretapping Laws to Allege Data Breaches.”
Click here to read the full Corporate Counsel article. (subscription required)
On May 18, 2023, the Federal Trade Commission (FTC) issued a proposed rule that would expand the existing Health Breach Notification Rule (HBNR) to cover health applications (apps) and other similar technologies. Given the rapid evolution of the health technology industry since the HBNR was issued in 2009, the FTC has expressed concern that the
Greenberg Traurig is a sponsor of the Privacy + Security Forum 2023 Spring Academy May 10-12 in Washington, DC. The conference will break down the silos of privacy and security and bring together seasoned thought leaders, who will host virtual sessions and workshops designed to deliver practical takeaways for all conference participants.
Wednesday, May 10