Printed from the Field Fisher Waterhouse web site
Web address: http://www.ffw.com/practices/technology-and-outsourcing/data-security-breach-action.aspx

Practices

Data security law and breach action

Spurred on by a relentless torrent of high-profile news stories about security breaches and data loss, law-makers the world over are now building a complex new legal framework for data security.

This consists of tough new laws for fines, custodial penalties, compulsory audits and the mandatory disclosure of serious security incidents; more prescriptive regulations on issues like encryption and the handling of incidents, plus very detailed rules for best practice in the handling of data.

Data security law is now one of the hottest topics within corporate governance. Organisations that fail to keep data safe and secure face serious consequences.

Our market-leading team of highly experienced data security lawyers provides organisations and individuals with advice and assistance on all matters arising within the new legal framework for data security, including how to deal with a serious security breach and its consequences, such as regulatory action, contract disputes and claims for compensation.

Our service

We offer a range of fixed-price services that are designed to quickly identify gaps in your policies and procedures in critical areas. These include:

  • A unique “Information Lifecycle Mapping” service, which tracks data flows around your organisation to identify risk areas and vulnerabilities.
  • A holistic solution for handling security incidents through our Breach Action service.
  • Drafting and document creation services, including for security policies, outsourcing contracts and employee engagements, to help you create a legally-compliant security system.
  • Representing your interests in dealings with the Information Commissioner and the Financial Services Authority, also providing civil and criminal defence services in legal proceedings for security breaches.
  • Providing advice on key legislation, e.g. the Data Protection Act; on best practice standards, e.g. ISO 27001; on financial sector issues, e.g. PCI DSS and FSA rules; on government contracting; on Privacy Enhancing Technologies, e.g. encryption, and on security law issues overseas.