As we approach the end of the year, here are the Top 5 Cybersecurity posts on the Debevoise Data Blog in 2025. 1. Protecting Privilege in Incident Response: Litigation Lessons (September 15, 2025) Companies responding to data breaches are faced with the question of whether their incident response investigation can be protected by attorney‑client privilege or the work‑product doctrine. This…
We are very proud to announce that on December 8, 2025, Debevoise won the Financial Times Innovative Lawyers North America Award for Innovation in New Legal Products. The Award was given to Debevoise for our Suite of Tools for Assessing AI Risk (STAAR), an AI-powered subscription platform that helps clients fast-track their responsible AI adoption. Developed by our Data Strategy & Security group,…
Why Agentic AI Often Fails and the Enduring Value of Human Judgment (11/4/2025) We’ve been doing a lot of work recently on agentic AI workflows. In this post, we share some of our thinking on how to assess their risks and benefits. At least for now, while AI can be very helpful in automating certain discrete aspects of professional services,…
After several years of contentious negotiations, late last year the United Nations General Assembly adopted the UN Convention against Cybercrime (the “UNCC”)the most significant international agreement on cybercrime and electronic evidence in more than two decades. Following a signing ceremony in Hanoi, Vietnam in October 2025, where seventy-two states indicated their intent to ratify the agreement, the UNCC—with its broad…
When we help clients draft their AI policies, we aim to ensure that employees understand the terms that we use. For example, we often define “AI” simply as generative AI, including the outputs of tools like ChatGPT, Gemini and Claude. Reviewing and approving a new AI System is hard enough without the added difficulty of not knowing exactly what risks…