Increasingly, c-suite executives and board members have questions about their companies' cybersecurity practices—or lack thereof. This monthly series for The Privacy Advisor provides high-level answers to some of those questions, specifically focusing on the development of cybersecurity policies, incident-response plans, liability of board members and executives for data breaches and the attorney-client privilege for cybersecurity investigations. In this second installment, Jeffrey Kosseff looks at company liability after some of the most common risks following a breach, whether under state law, industry regulations or shareholder suits.
Full Story