Today, Debevoise’s Data Strategy & Security practice (DSS) is launching a Data Blog to help clients identify and respond to emerging issues, and a Debevoise Data Portal to help clients facing a breach assess and begin addressing their notification obligations within minutes of detection. We are also introducing DSS as the new name for our practice, which had been called Cybersecurity & Data Privacy, to better reflect the central role data now plays in virtually every client’s strategic plan and business operations, and the complex challenges our clients face across the entire data lifecycle.
Through the Data Blog, DSS will offer technical and legal insights on the latest data-strategy and security issues our clients are facing, including:
- Emerging cybersecurity threats from nation states and organized crime, along with ways to reduce those risks
- Tips for cyber incident preparation and response
- Data governance
- Regulatory and reputational risks of machine learning and AI applications
- Tailoring business practices to developments in cybersecurity, privacy and AI litigation, regulation and enforcement
- Best practices for data issues arising in M&A diligence, licensing, insurance and vendor contracting
For clients facing a breach, the Debevoise Data Portal (now in beta testing) will provide a secure online suite of tools that uses a simple, query-based system to help clients assess and respond to their data breach notification obligations across all 50 U.S. states and federal laws, including the Health Insurance Portability and Accountability Act and the Gramm-Leach-Bliley Act.
The Portal asks clients to answer a series of questions about a hypothetical or actual incident, and within minutes it generates a detailed report of the resulting breach notification obligations – including whom to notify, by when, what the notice should include, and the method of notification. It also generates templates for the actual notifications. The Portal is regularly updated to reflect the latest changes in breach notification laws and regulatory guidance.