ResourceCenter

The U.S. Securities and Exchange Commission requires most publicly traded companies to annually disclose potential risk factors, including exposure to cybersecurity threats and violations of consumer privacy laws. The IAPP’s third annual study of these disclosures (part of Form 10-K) of 150 publicly...

The Phisher Queen creates her Latest weapon ... Blockhead! Click on the image below if you would like to download a high-resolution pdf to print and hang in your office. (26.7MB)...

This slide deck created by the IAPP research team offers a customizable template for a report to organizational leadership to help Data Protection Officers show the activities of the data protection team as well as record compliance with the General Data Protection Regulation....

This Nov. 13, 2018, communication from the Commission to the European Parliament, the European Council, the Council, the European Central Bank, the European Economic and Social Committee, the Committee of the Regions and the European Investment Bank outlines a so-called "no deal" Brexit.Read Now (PD...

This flowchart describes the duties imposed on attorneys by the Model Rules of Professional Conduct following a data breach or cyberattack in which client information was compromised. It provides a stepwise process for attorneys to follow after the attack. The chart is based on the guidance publishe...