Account

Sign in to access your account and subscription

Data Security and Data Breach Response Continue to Be a Hot Issue

<b><i>Lessons from 2017 Enforcement Actions and Guidance</b></i><p>Regulators including the FTC, the Department of Health and Human Services Office of Civil Rights (OCR) — the agency responsible for enforcing the HIPAA rules for protected health information (PHI) — and state attorneys general have issued guidance and announced a number of settlements in data security cases that are instructive about measures that organizations can take to reduce the potential for a data breach or, if a breach does occur, provide appropriate notice.

12 minute read November 01, 2017 at 12:15 AM
By
Kevin Coy
Data Security and Data Breach Response Continue to Be a Hot Issue

 

Data security and breach notification issues continue to grab headlines, most recently in connection with the data breach announced by Equifax. Regulatory scrutiny is currently underway, with the Federal Trade Commission (FTC) taking the unusual step of publicly announcing that the agency is investigating the breach.

This premium content is locked for Cybersecurity Law & Strategy subscribers only

ENJOY UNLIMITED ACCESS TO THE SINGLE SOURCE OF OBJECTIVE LEGAL ANALYSIS, PRACTICAL INSIGHTS, AND NEWS IN Cybersecurity Law & Strategy

  • Stay current on the latest information, rulings, regulations, and trends
  • Includes practical, must-have information on copyrights, royalties, AI, and more
  • Tap into expert guidance from top entertainment lawyers and experts

Already have an account? Sign In Now

For enterprise-wide or corporate access, please contact Customer Service at [email protected] or call 1-877-256-2473.

NOT FOR REPRINT

© 2026 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.

Continue Reading

AI claims are getting more scrutiny and regulators are looking more closely at whether organizations can substantiate what they say their AI does, while courts are beginning to address what happens when AI-generated search summaries get information wrong.

November 01, 2026

This is the second in a two-part series on AI-driven crises. Part 1 examined communications during an incident while the facts are still developing. Part 2 addresses crisis plans, governance and tabletop exercises before an agent acts on behalf of the business.

November 01, 2026