Medium, large and supersize...even fast food meals come in
different sizes. After all, we want to be able to choose what is
right for us and what meets our specific needs. Legal
representation for cybersecurity incidents is no different. It
should be customized to fit each client's particular situation,
addressing the nuances of the event and ensuring that the response
is proportionate. There is no one size fits all approach to legal
notification, especially where consumers or clients of the affected
entity need to be informed.
When a data security event occurs, the first consideration
should be the legal factors. However, analysis of the various
statutes and regulations does not always provide a definitive
conclusion as to how the matter should be resolved. This is where a
true holistic evaluation becomes important. For example, following
a data security incident that occurred at a domestic violence
shelter, it was determined that, from a legal
