Account

Sign in to access your account and subscription

Five Takeaways from Recent Cybersecurity Developments by Colorado and the SEC

Colorado recently adopted a new law expanding companies' obligations in the event of a cybersecurity incident, and establishing new data security and disposal obligations. Recent announcements by the SEC likewise emphasize important responsive points for both companies and their personnel in the wake of an incident. Five key takeaways from these developments are highlighted in this article.

1 minute read August 01, 2018 at 12:13 AM
By
Brian Neil Hoffman
Five Takeaways from Recent Cybersecurity Developments by Colorado and the SEC

Colorado's New Breach and Data Security Provisions

  1. Update cybersecurity incident response procedures and ensure key stakeholders are well informed and prepared in advance
e.g. e.g.
  1. Update current data protection and destruction policies and practices
  1. Review (and if needed, increase) insurance coverages for investigating and litigating potential incidents

Addressing Recent SEC Enforcement Activity

  1. Remain attuned to potential SEC/investor disclosures
SEC released guidance announcement press release
  1. Minimize individual liability risks

Conclusion

other preventative steps ***** Brian Neil Hoffman [email protected]

This premium content is locked for Cybersecurity Law & Strategy subscribers only

ENJOY UNLIMITED ACCESS TO THE SINGLE SOURCE OF OBJECTIVE LEGAL ANALYSIS, PRACTICAL INSIGHTS, AND NEWS IN Cybersecurity Law & Strategy

  • Stay current on the latest information, rulings, regulations, and trends
  • Includes practical, must-have information on copyrights, royalties, AI, and more
  • Tap into expert guidance from top entertainment lawyers and experts

Already have an account? Sign In Now

For enterprise-wide or corporate access, please contact Customer Service at [email protected] or call 1-877-256-2473.

NOT FOR REPRINT

© 2026 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.

Continue Reading

AI claims are getting more scrutiny and regulators are looking more closely at whether organizations can substantiate what they say their AI does, while courts are beginning to address what happens when AI-generated search summaries get information wrong.

November 01, 2026

This is the second in a two-part series on AI-driven crises. Part 1 examined communications during an incident while the facts are still developing. Part 2 addresses crisis plans, governance and tabletop exercises before an agent acts on behalf of the business.

November 01, 2026