Call us now:
We are starting to see criminal convictions being handed down to individuals for failing to managed cyber attacks. In this case the former CEO of a psychotherapy firm in Finland was handed a 3 month suspended prison sentence for failing to fulfil GDPR requirements.
GDPR is old regulation, focused on PII. One suspects that once cyber regulation such as NIS 2 and DORA come into force, or the SEC proposal, or CRA proposal become a reality then we will see regulated board liability as legal and compliance risk for cyber focuses on the board room.
Ted Dziekanowski Stephen Pitt-Walker, JD, FGIA Jamie Foster Rachel V. Rose, JD, MBA
#cybersecurity #cyberattacks #cyberlaw #gdpr #governance
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7054541292692742144