Businesses today face constant, and constantly evolving, cybersecurity risk. Cyberattacks can cost victim businesses millions of dollars and create a host of complex problems, including the theft of valuable business information, regulatory investigations and penalties, civil lawsuits by shareholders and customers, demands for cooperation from law enforcement agencies, adverse media attention, and loss of customer trust and loyalty. Regulators, recognizing the threat posed by computer hackers to businesses and critical infrastructure, are constantly proposing and implementing new rules that require businesses to adopt comprehensive cybersecurity and data protection programs.
Cadwalader’s White Collar Defense and Investigations group, which includes former federal prosecutors, a former Department of Defense analyst, and two Certified Information Privacy Professionals, has the experience and background to provide legal advice to clients in all aspects of cybersecurity, data protection, and incident response. Partners have represented clients before the Department of Justice, the Federal Trade Commission, the Securities and Exchange commission, the Commodity Futures Trading Commission, and the New York Department of financial Services, and advised clients on cybersecurity matters including:
- Cybersecurity Programs and Compliance. Identifying and assessing clients’ cybersecurity risks – including the risks posed by their third party service providers – to develop and implement the policies and procedures necessary to comply with regulations and reduce the risk of harmful cyberattacks.
- Incident Response and Investigations. Quickly identifying and retaining appropriate computer forensic consultants, directing internal investigations into potential incidents, managing law enforcement and regulatory interactions, overseeing breach notifications and public disclosures, and preparing for potential regulatory action or civil litigation.
- Regulatory Defense and Litigation. Defending corporate victims of cyberattacks in regulatory enforcement proceedings and lawsuits from shareholders, customers, and other businesses.