Abstract
As data breaches continue to plague organization and the impacts to individuals increase, the statutory and regulatory responses become more severe. Nearly all states in the U.S. have passed data breach laws, which include costly breach notification requirements. The international community has adopted stringent privacy laws and some countries are now considering adding breach notification requirements as a further deterrent for organizations that haven't taken the requirements seriously. This session explores the complexities and ambiguities associated with these breach laws, especially when encryption can serve as a safe harbor. Recent massive breaches and lawsuits will be used as case studies
Learning Objectives
General introduction to breach laws and notification requirements
Understand the role encryption can play with breach notifications