Insights

Data breaches have become more and more common, to the point that companies essentially have to assume that sooner or later, they will experience one. That makes it critical to have a clear understanding of the regulatory requirements for notifying regulators and affected individuals in the wake of a breach. But the rules don’t always make that process clear.

"Companies with personal data or trade secrets are under persistent and relentless attack," says Crowell & Moring partner Jeffrey Poston, co-chair of the firm's Privacy & Cybersecurity Group. No industry is immune. From retailers to auto manufacturers to financial institutions, U.S. and global companies are in the crosshairs. Government agencies have also experienced breaches.