Introduction
In 2019, boards and senior management across a range of
industries continued to cite cybersecurity as one of the most
significant risks facing their companies. At the same time,
comprehensive data privacy regulation became a new reality in the
United States, and many companies have implemented major revisions
to their privacy policies and data systems to achieve compliance
with California's groundbreaking privacy legislation.
Major data breaches continued to make headlines in 2019, and
state and federal legislators, enforcement authorities and
regulators remained highly focused on data security and privacy
practices. European regulators announced several notable
enforcement actions under Europe's General Data Protection
Regulation ("GDPR"), which confirmed that European
authorities are willing to use the GDPR's authorization to levy
large fines, even outside the context of major breaches resulting
in exposure of customer information.
