Information Security Demands More Than Privacy Laws Compliance

The California Consumer Privacy Act has made headlines in recent weeks (including in several LB3 podcasts "A Summary CCPA Procurement and Compliance Guide for Your IT and Telecoms Agreements" and "How the California Consumer Privacy Act of 2018 Affects Your Service Provider Agreements"); this week because the California Attorney General released modifications to the draft regulations with which businesses must comply. Protection of personal information is necessary to comply with the CCPA and various state and federal laws, but enterprises' needs for information security are broader. They must protect the underpinnings of their businesses – their intellectual property, trade secrets and highly sensitive communications such as spin offs or acquisitions – against unauthorized access, use, or disclosure. To help accomplish this, enterprises should require their IT and telecoms providers to include appropriate information security clauses in their IT and telecoms