Insights

Privacy and Cybersecurity practice group leader Liisa Thomas comments on GDPR enforcement saying, "Enforcement is likely to fall into at least two buckets. These include actions involving data breaches that trigger reporting under the regulation's tight 72-hour notification window and that the regulator feels were caused by inadequate security, and those that center on alleged failures to provide consumers with the various data access and redress rights enshrined in the statute."