Ransomware Attacks on Law Firms: Anatomy of a Breach Response
A firm's files are encrypted on a Friday night. What happens next, hour by hour, and the decisions that matter most.
Category
Data, Privacy & Cybersecurity
Privacy regulation, breach response and cyber risk.
State Privacy Laws Keep Multiplying. Is a Federal Standard Next?
Compliance teams are juggling a growing patchwork of state rules while Congress debates pre-emption.
Biometric Data Lawsuits: What Employers Need to Know
Fingerprint time clocks and face-scanning apps have produced costly class actions. Consent and retention policies are the first defence.
Children’s Online Privacy Rules Tighten for App Developers
Age assurance, default settings and data minimisation are moving from best practice to legal requirement.
Cyber Insurance Exclusions Spark a New Wave of Coverage Disputes
War exclusions, unpatched systems and late notice are being tested as insurers push back on large claims.
Breach Notification Deadlines: A Reality Check for Compliance Teams
72 hours, 30 days or 'without unreasonable delay'? Mapping overlapping notification duties after an incident.
AI Training Data and the Privacy Questions Nobody Is Asking
Personal data scraped into training sets raises consent and deletion questions that existing laws struggle to answer.
Vendor Contracts After a Breach: Who Pays?
Indemnities, liability caps and security schedules decide who carries the cost when a supplier is hacked.
Cross-Border Data Transfers Remain a Moving Target
Transfer frameworks keep changing. How multinationals build transfer programmes that can survive the next legal challenge.
Board Oversight of Cyber Risk Is Now a Litigation Issue
Shareholders are suing directors over breaches. What boards must document to show they were paying attention.