Cybersecurity

Part Two of a Two-Part Article Part One of this article, last issue, covered how the CCPA applies to businesses — both in and outside California, the revenue threshold, proposed amendments and other open issues. Part Two continues with the rights that CCPA grants to Californians, the CCPA's impact on company privacy policies, how other states' privacy laws compare to the CCPA, exceptions and penalties for violating the Act.

"It's Not the Hardware You Worry About, It's the Mistake That Someone Makes That Inadvertently Gives a Bad Actor Access." The legal industry has poured significant resources into cybersecurity, leading to huge leaps in progress in the last decade. But there are areas where large and small law firms can do much better in preventing and reacting to data breaches, and the legal sector may risk falling behind other industries. That's partly because hackers are learning how to circumvent law firm security systems, leading to a continuous game of cat and mouse.

General counsel who navigate the mishmash of state privacy laws may relate to a new study showing that individual U.S. states' privacy statutes are spread across a broad spectrum.

A set of steps and best practices that legal teams can follow to ensure thorough and efficient handling of e-discovery in crisis situations.

Summer 2019 put some interesting case law into the books. We'll take a look at three cases having to do with lost data and whether spoliation sanctions were levied.

Fortnite video game developer Epic Games Inc. isn't just dodging digital adversaries — now it's been slammed with a class action lawsuit over a data breach.

Part One of a Two-Part Article Responses to questions businesses frequently ask about the impacts of the CCPA. Implementation challenges inevitably will arise as a company works to apply these new requirements to its business practices. The time is now to start preparing for the CCPA, as well as for other new U.S. privacy laws that are likely to follow.

Gone are the days of "basic security." What used to be optional is now standard: two factor authentication, complex passwords, clean desk policies, data encryption at rest and in transit, mobile device management and up-to-the-minute patching. Clients expect these items to already be in place and are further expanding their expectations.