Data Security Breaches: Growing Liability Threat

Crafting and Implementing Policies to Prevent and Respond to Inadvertent Disclosures

Recording of a 90-minute CLE teleconference with Q&A


Conducted on Tuesday, July 28, 2009
Recorded event now available


This seminar will examine recent legislative and case law developments impacting the duty of businesses to protect individuals' personally identifiable and other confidential information. The panel will review common data vulnerabilities and outline proactive strategies to prevent and respond to data breaches.

Description

Several states responded to a rash of data security breaches by enacting laws to require that private customer and employee data be protected. Over 40 states now have such laws. However, standards for what constitutes reasonable safeguards of personally identifiable information are vague and vary.

Documented data breaches affected over 285 million records in 2008 alone, damaging the reputations of companies and resulting in multimillion-dollar settlements against companies. In a time when most businesses store and transmit data electronically, the likelihood of breaches is only growing.

In light of recent developments — including data security regulations effective January 1, 2010 in Massachusetts with far-reaching national implications — businesses must prepare now to meet the data management and security challenges associated with handling personally identifiable information.

Listen as a panel of legal specialists examines recent legislative and case law developments impacting the protection of employees' and customers' sensitive personal information and other confidential data. The panel will discuss the data vulnerabilities most often seen and will offer strategies to prevent, prepare for and respond to data breaches.

Outline

  1. Recent developments
    1. Massachusetts legislation effective January 1, 2010
    2. Other recent state legislation
    3. Recent litigation/case law
  2. Corporate obligations before a breach
    1. Developing a “Comprehensive Information Security Program”
    2. Encryption of sensitive personal information that will be electronically transmitted
    3. Internal training on appropriate response to data breach
  3. Corporate obligations after a breach
    1. Rapid notification of key company officials
    2. Investigation of the breach
    3. Rapid notification of affected individuals and state officials
    4. Considering offering credit monitoring or other services to affected individuals
    5. Documenting actions taken in response to a security breach
  4. On the horizon — proposed U.S. Senate and U.S. House bills

Benefits

The panel will review these and other key questions:

  • How will the new Massachusetts data security regulations affect the data practices of corporations nationwide that handle data of the state's residents?
  • What proactive steps should businesses take to safeguard the sensitive personal information of customers and employees?
  • What response policies should companies have in place in the event of a data breach to minimize liability for an inadvertent disclosure of sensitive personal information?
  • What steps are state and the federal governments taking to help businesses safeguard the personal data of employees and customers?

Faculty

Gregory T. Casamento, Partner
Locke Lord Bissell & Liddell, New York

He focuses on business, commercial, insurance and intellectual property litigation. His experience includes litigating trademark infringement claims, contract and restrictive covenants disputes, and insurance coverage issues. He also advises clients on a review of their e-process systems to ensure those systems create admissible and enforceable e-signatures, e-contracts and e-records.

Sharon Williamson, Senior Counsel Privacy and Data Security
Dell Inc., Austin, Texas

She advises on privacy and security programs, policies and incidents and related regulatory requirements, including email, SMS, telemarketing, and behavioral targeting. In addition, she counsels clients globally on PCI compliance, vendor contracting and due diligence and on structuring software, service and marketing programs in compliance with privacy and security laws and Dell’s privacy policy.

Vita E. Zeltser,
Locke Lord Bissell & Liddell, Atlanta

She works in the firm's Corporate Department, focusing on general corporate and corporate governance matters, information technology, e-commerce, privacy, and information security. She also has extensive experience with various insurance regulatory matters, including third party administration licensing.

Ordering

Recorded Event

Includes full event recording plus handouts (available after live seminar).

CLE: Pre-approved for self-study credit in AK, AZ, CA, CT*, MO, MT, NY*, TX, VT, WA. Upon request, self-study credit is also available in: CO, FL, GA, ID, KY, LA, ME, ND, NE, NH, NM, NV, OR, UT, WI, WV, WY. If you are applying for self-study credit in one of these states, contact Strafford CLE at 1-800-926-7926 ext. 35 or CLE@straffordpub.com. (*For CT and NY, Strafford needs to process the CLE — see below to purchase this option.)

MP3 Download (Audio Only) $297.00
Available 24 hours after the live event

How does this work?

CD $297.00 plus $9.45 S&H
Available ten business days after the live event

CLE on CD/DVD Processing $65.00

Program Materials

Requires Adobe Reader 8 or later. Download Acrobat FREE.

Program Materials

Requires Adobe Reader 8 or later. Download Acrobat FREE.

CLE Credit

Strafford's live seminars qualify for CLE in every state that accredits webinars. They offer you a high quality, cost effective, and convenient CLE option, with no lost travel time or expenses.

More Details>

Customer Reviews

Convenient and well-organized.  Well-run program.

Michael V. Kruljac

IMERYS

A thoroughly professionally structured and presented program.

Roy Gowey

City of Coeur d'Alene

The speakers were well versed and kept my attention throughout the program.

Natalie Kossak

Independent Fiduciary Services

The three presentations created a balanced approach.

Cris Navarro

Enloe Medical Center

Very informative — one of the best run programs in a plethora of on-line offerings.

Jeff Michelman

Stinson Morrison Hecker

Corporate Law Advisory Board

Stuart M. Altman

Partner

Hogan & Hartson

Mark H. Hain

General Counsel

Assurance America Corporation

Michael Hermsen

Partner

Mayer Brown

Kathleen Mayton

General Counsel

Rollins, Inc.

Michael J. Missal

Partner

K&L Gates

G. Thomas Stromberg

Partner

Kaye Scholer