Cybersecurity law & data breach response
A data breach response plan and advice on your data obligations, prepared before an incident rather than during one.
Have the plan before the breach
A data breach response plan tells your people what to do, who to notify and what to say, before the pressure is on.
Why a response plan matters
Cyber breaches are increasing, and an attack a company is unprepared for can do lasting damage. You may not be able to prevent every breach, but you can reduce the risk and limit the harm. The legal requirements are also tightening: penalties for breaching privacy laws can exceed $50 million for corporations and $2.5 million for individuals, and regulators have used successful actions against companies as a step towards personal liability for directors.
How we help
- Plan
- What data you must keep, for how long, and how to dispose of it
- Collection terms, cloud provider questions and supply contract clauses
- Company policies and notifications ready in advance
- Monitor
- Reviews of your policies and plan as the law changes
- Updates drawn from recent breaches, independent of any one technical provider
- Respond
- Who you must notify, and whether the law requires it
- What to say
- Steps towards containment
Talk to the cybersecurity law team
Call during office hours or send an enquiry, and the right lawyer will come back to you. Monday to Friday, 9am–5:30pm.