Insider threat remains one of the most challenging cybersecurity issues companies face today. Over the course of this new Data Chronicles series, Hogan Lovells colleagues from across of our firm practice groups will share insights garnered from deep experience working on insider threat investigations and discuss key issues touching everything from privacy and cybersecurity to employment and IP. In this episode, Scott Loughlin, co-lead of the Hogan Lovells Privacy and Cybersecurity practice, discusses with Hogan Lovells partners James Denvil and David Sharfstein, and senior associate, Alicia Paller, how to kick off an insider threat investigation and factors companies should keep in mind.

Scott Loughlin: Contact

James Denvil: Contact

David Sharfstein: Contact

Alicia Paller: Contact

Insider threat remains one of the most challenging cybersecurity issues companies face today. Over the course of this new Data Chronicles series, Hogan Lovells colleagues from across of our firm practice groups will share insights garnered from deep experience working on insider threat investigations and discuss key issues touching everything from privacy and cybersecurity to employment and IP. In this episode, Scott Loughlin, co-lead of the Hogan Lovells Privacy and Cybersecurity practice, and Hogan Lovells partners Pete Marta and Stephanie Yonekura lay the foundation for how insider threats may present within organizations and how companies may prepare to mitigate the associated risks.

Scott Loughlin: Contact

Pete Marta: Contact

Stephanie Yonekura: Contact

In our second installment of our two-part series, we discuss the proposed rules issued by the California Privacy Protection Agency (the CPPA) focusing on cybersecurity and the requirement to conduct cybersecurity assessments. Scott Loughlin, co-lead of the Hogan Lovells Privacy and Cybersecurity practice, is joined by Hogan Lovells associates Dan Ongaro and Alaa Salaheldin as they explore the implications these cybersecurity requirements will have on data professionals, businesses, as well as corporate boards.

Scott Loughlin: Contact

Dan Ongaro: Contact

Alaa Salaheldin: Contact

In September, the Board of the California Privacy Protection Agency (CPPA) announced the first public drafts of two forthcoming sets of regulations relating to the California Consumer Privacy Act and California Privacy Rights Act. These “discussion” drafts focus on new requirements related to cybersecurity audits, privacy risk assessments, AI, and automated decision-making. In this episode, Scott Loughlin, co-lead of the Hogan Lovells Privacy and Cybersecurity practice, is joined by Hogan Lovells senior associate Aaron Lariviere to explain the context for the draft regulations, to walk through key features of the privacy risk assessment regulations, and to explore the potential impacts these regulations will have for businesses.

Scott Loughlin: Contact

Aaron Lariviere: Contact

The role of a Data Protection Officer (DPO) has been well-known under data protection laws in Europe, currently under the EU GDPR, and prior to that, the EU Data Protection Directive. The role goes as far back as the 1970s, however, despite its established history, numerous questions continue to revolve around the responsibilities of a DPO. Scott Loughlin, co-lead of the Hogan Lovells Privacy and Cybersecurity practice, sits down with Hogan Lovells partner Christian Tinnefeld to discuss the ever-evolving role of a DPO and provide some practical tips for those serving in the function.

In this episode of The Data Chronicles, we delve into the emerging realm of cyber risk and liability and its connection to the False Claims Act. Join us as Scott Loughlin, co-lead of the Hogan Lovells Privacy and Cybersecurity practice, engages in a conversation with Hogan Lovells partner Mike Scheimer and counsel Stacy Hadeka. Together, they explore the implications when organizations holding government contracts face allegations of breaching their cybersecurity commitments. Discover why this is a vital concern, particularly for defense contractors, universities, and any entity providing products and services to the United States Government receiving CUI or subject to unique cybersecurity requirements such as CMMC.

Scott Loughlin: Contact

Mike Scheimer: Contact

Stacy Hadeka: Contact

The Federal Communications Commission (FCC) has proposed a voluntary cybersecurity labeling program to address unique cybersecurity concerns associated with the growing number of Internet of Things (IoT) devices. Against the backdrop of the FCC’s Notice of Proposed Rulemaking (NPRM), Scott Loughlin, co-lead of the Hogan Lovells Privacy and Cybersecurity practice, discusses with Hogan Lovells partners Ari Fitzgerald and Katy Milner the scope of the FCC’s proposed program (covering everything from mobile phones and computers to Internet-connected refrigerators, cars, and speakers) and how manufacturers of these devices should be thinking about the new requirements.

Scott Loughlin: Contact

Ari Fitzgerald: Contact

Katy Milner: Contact

In the second installment of our two-episode series, Scott Loughlin, co-lead of the Hogan Lovells Privacy and Cybersecurity practice, interviews Hogan Lovells litigation partner Vassi Iliadis and associate Laura Penaranda for an in-depth discussion on arbitration risks and class action waivers. They delve into the effects these provisions have on consumer-facing companies after a data security issue, resulting in an increase in arbitration demands due to clauses that are included in common terms of use contracts. The discussion provides an overview of arbitration risks, the impact of mass arbitration, and what companies should consider when revising their arbitration agreements.

Scott Loughlin: Contact

Vassi Iliadis: Contact

Laura Penaranda: Contact

This episode explores the recently adopted rules from the U.S. Securities and Exchange Commission (SEC) on cybersecurity disclosures for publicly traded companies.  Scott Loughlin, co-lead of the Hogan Lovells Privacy and Cybersecurity practice, chats with Hogan Lovells partners John Beckman, Allison Holt Ryan and Paul Otto as they uncover key elements of these rule changes, including enhanced disclosure requirements for certain cybersecurity incidents, cyber risk management expectations, and updated processes for cybersecurity oversight and reporting.

Scott Loughlin: Contact

John Beckman: Contact

Allison Holt Ryan: Contact

Paul Otto: Contact

In today's digital age, the challenges of cybersecurity are increasing and evolving. When a data breach happens, the legal aftermath can be both complex and costly.  In the first installment of a two part series, Scott Loughlin, co-lead of the Hogan Lovells Privacy and Cybersecurity practice, interviews Hogan Lovells litigation partner Allison Holt Ryan and counsel Adam Cooke as they discuss the ins and outs of data breach litigation, focusing on the current environment, a recent Fourth Circuit decision and its implications, and steps businesses can consider as they work to mitigate data breach litigation risk.

Scott Loughlin: Contact

Allison Holt Ryan: Contact

Adam Cooke: Contact