Scarinci Hollenbeck, LLC, LLCScarinci Hollenbeck, LLC, LLC

Firm Insights

Top 7 Key Cybersecurity & Privacy Law Developments From 2017

Author: Scarinci Hollenbeck, LLC

Date: January 9, 2018

Key Contacts

Back

From Equifax to WannaCry, the Steady Stream of Data Breaches & Cyberattacks Throughout 2017 Led To Several Cybersecurity & Privacy Law Developments Worth Noting

The Equifax data breach was arguably the most captivating cybersecurity headline of 2017. In addition to the significant public relations fallout, the data breach spurred class-action lawsuits, government investigations, and renewed efforts to regulate credit reporting companies.

Seven Key Cybersecurity & Privacy Law Developments From 2017
Photo courtesy of Imgix (Unsplash.com)

Of course, Equifax was not alone. In 2017, the WannaCry ransomware attack crippled businesses across the globe. Countless others fell victim to less publicized cyberattacks, such as phishing scams and malware.

Not surprisingly, the steady stream of data breaches and other cyberattacks has prompted a wide range of legal responses. Below are some of the key cybersecurity law developments of 2017:

  • NY Cybersecurity Regulations: New York’s landmark cybersecurity regulations for financial companies took effect in March 2017. The Department of Financial Services’ data security rules require financial services companies to establish and maintain a cybersecurity program designed to “ensure the confidentiality, integrity and availability” of their information systems. The programs must address five key areas: identification of cyber risks; implementation of policies and procedures to protect unauthorized access/use or other malicious acts; detection of cybersecurity events; responsiveness to identified cybersecurity events to mitigate any negative events; and recovery from cybersecurity events and restoration of normal operations and services.
  • Stricter Regulations for Credit Reporting Companies: New York is one of several states considering new cybersecurity regulations for credit reporting companies in the wake of the Equifax breach. A proposed regulation would bring credit reporting companies under the purview of the state’s new cybersecurity rules and require them to register with the state.
  • Greater Demand for Cyber Insurance: Given that most businesses will eventually fall victim to a cyberattack, companies are increasingly looking for different ways to hedge against the risk and protect themselves from losses. As demand for cyber insurance grows, insurance companies are also expanding coverage to address specific risks, such as ransomware and state-sponsored attacks. Insurers are also continually assessing the risks and incentivizing companies with comprehensive data security programs through lower premiums. Courts have also shown a willingness to apply more traditional business policies to cyber-related losses.
  • Regulators Making Cybersecurity a Top Priority: Agencies such as the Securities and Exchange Commission (SEC) continue to identify cybersecurity as a top priority when conducting examinations of regulated entities. In addition, the Federal Trade Commission (FTC) continues to file enforcement actions against companies for failing to prevent data breaches and otherwise failing to adequately protect the privacy of consumer data. States’ Attorneys General have also ramped up enforcement efforts.
  • Liability of Executives and Boards for Data Breaches: Officers and Boards are increasingly being held accountable for data breaches, particularly if they could have been easily prevented or if the response were mismanaged. As evidenced by the resignation of former Yahoo CEO Marissa Mayer, executives left holding the bag may not only lose part of their paychecks, but also their jobs.
  • Risks Associated with Internet of Things: The “Internet of Things” (IoT), which refers to everyday objects, from home security systems to smartwatches, that send and receive data via an Internet connection, grew significantly in 2017. As adoption of the technology grows, so do the potential data privacy and cybersecurity risks, including unauthorized access, misuse of personal information, and personal safety concerns. This summer, a bill was introduced in Congress that would establish baseline cybersecurity standards for federal procurement of IoT devices. While the Internet of Things Cybersecurity Improvement Act of 2017 would only apply to IoT devices sold to the federal government, should the measure advance, additional legislation for consumer-facing devices would likely be forthcoming.
  • Cybersecurity Evaluated in M&A Transactions: When contemplating a merger or acquisition, companies in all industries are making cybersecurity a more important part of the due diligence process. After all, data breaches can significantly impact a company’s reputation and lead to significant legal liability. Cybersecurity incidents can also lead to public disclosure of valuable trade secrets and other proprietary information. Prior to closing an M&A transaction, buyers should review any past data breaches and other cybersecurity incidents. In addition, when structuring an M&A transaction, the parties should also address how liability for breaches will be apportioned.

As we head into 2018, cybersecurity risks will continue to increase for businesses and consumers alike. While technology is expected to help make threat detection easier and more cost-efficient, traditional cybersecurity measures, such as password protection and data backup, will continue to play a vital role.

    No Aspect of the advertisement has been approved by the Supreme Court. Results may vary depending on your particular facts and legal circumstances.

    Scarinci Hollenbeck, LLC, LLC

    Related Posts

    See all
    Understanding Chattel Paper: A Key Component in Secured Transactions post image

    Understanding Chattel Paper: A Key Component in Secured Transactions

    Using chattel paper to obtain a security interest in personal property is a powerful tool. It can ensure lenders have a legal claim on collateral ranging from inventory to intellectual property. To reduce risk and protect your legal rights, businesses and lenders should understand the legal framework. This framework governs the creation, sale, and enforcement […]

    Author: Dan Brecher

    Link to post with title - "Understanding Chattel Paper: A Key Component in Secured Transactions"
    Crypto Compliance: A Comprehensive Guide post image

    Crypto Compliance: A Comprehensive Guide

    For years, digital assets operated in a legal gray area, a frontier where innovation outpaced the reach of regulators and law enforcement. In this early “Wild West” phase of finance, crypto startups thrived under minimal oversight. That era, however, is coming to an end. The importance of crypto compliance has become paramount as cryptocurrency has […]

    Author: Bryce S. Robins

    Link to post with title - "Crypto Compliance: A Comprehensive Guide"
    Supreme Court and Title VII: Implications for Reverse Discrimination post image

    Supreme Court and Title VII: Implications for Reverse Discrimination

    Earlier this month, the U.S. Supreme Court issued a decision in Ames v. Ohio Department of Youth Services vitiating the so-called “background circumstances” test required by half of federal circuit courts.1 The background circumstances test required majority group plaintiffs pleading discrimination under Title VII of the Civil Rights Act to meet a heightened pleading standard […]

    Author: Matthew F. Mimnaugh

    Link to post with title - "Supreme Court and Title VII: Implications for Reverse Discrimination"
    SPACs Are Back, What You Need to Know post image

    SPACs Are Back, What You Need to Know

    Special purpose acquisition companies (better known as SPACs) appear to be making a comeback. SPAC offerings for 2025 have already nearly surpassed last year’s totals, with additional transactions in the pipeline. SPACs last experienced a boom between 2020–2021, with approximately 600 U.S. companies raising a record $163 billion in 2021. Notable companies that went public […]

    Author: Dan Brecher

    Link to post with title - "SPACs Are Back, What You Need to Know"
    Short Form Merger: Streamlining the Process for Businesses post image

    Short Form Merger: Streamlining the Process for Businesses

    Merging two companies is a complex legal and business transaction. A short form merger, in which an acquiring company merges with a subsidiary corporation, offers a more streamlined process that involves important corporate governance considerations. A short form merger, in which an acquiring company merges with a subsidiary corporation, offers a more streamlined process. However, […]

    Author: Dan Brecher

    Link to post with title - "Short Form Merger: Streamlining the Process for Businesses"
    Tariff Response Options for Small Businesses Facing Financial Distress post image

    Tariff Response Options for Small Businesses Facing Financial Distress

    The Trump Administration’s new tariffs are having an oversized impact on small businesses, which already tend to operate on razor thin margins. Many businesses have been forced to raise prices, find new suppliers, lay off staff, and delay growth plans. For businesses facing even more dire financial circumstances, there are additional tariff response options, including […]

    Author: Brian D. Spector

    Link to post with title - "Tariff Response Options for Small Businesses Facing Financial Distress"

    No Aspect of the advertisement has been approved by the Supreme Court. Results may vary depending on your particular facts and legal circumstances.

    Sign up to get the latest from our attorneys!

    Explore What Matters Most to You.

    Consider subscribing to our Firm Insights mailing list by clicking the button below so you can keep up to date with the firm`s latest articles covering various legal topics.

    Stay informed and inspired with the latest updates, insights, and events from Scarinci Hollenbeck. Our resource library provides valuable content across a range of categories to keep you connected and ahead of the curve.

    Let`s get in touch!

    * The use of the Internet or this form for communication with the firm or any individual member of the firm does not establish an attorney-client relationship. Confidential or time-sensitive information should not be sent through this form.

    Sign up to get the latest from the Scarinci Hollenbeck, LLC attorneys!