Cybersecurity Law

The increasing frequency of data security breaches and a rapidly expanding legal framework is creating an operational reality where businesses are under constant pressure to demonstrate that they are building and maintaining a legally reasonable cybersecurity regime. We have extensive experience advising a broad spectrum of clients across all related needs.

Our cybersecurity lawyers offer in-depth knowledge of regulatory requirements, industry standards, and best practices—enhanced by serving in advisory roles for the governor, the FBI, and national cybersecurity summits. We will assess your cybersecurity risk profile and current practices and provide you with proactive, up-to-date, and practical advice that will help you build and sustain a legally reasonable cybersecurity strategy.

Maslon's cybersecurity law services include:

• Data Security and Privacy Best Practices Counseling
• Information Security Policy Counseling and Training
• Data Breach Investigation and Response
• Privacy Reviews and Assessments
• Industry Standards Such as PCI DSS, NIST SP 800x, ISO 27001, 27002, 27018, 19086 Counseling
• Cybersecurity Insurance Assessments
• Cloud and SaaS Agreement Review and Negotiation
• Supply Chain Due Diligence
• Coordinating Interaction with Federal and State Agencies (e.g., FBI, DOJ, FTC, SEC, FCC, FDA)
• Compliance with Federal and State Laws, including:
  • Computer Fraud and Abuse Act
  • FISMA
  • Gramm-Leach-Bliley Act
  • HIPAA
  • Stored Communications Act
  • CAN-SPAM Act
  • New York Department of Financial Services (NYDFS) Cybersecurity Requirements for Financial Services Companies
  • California Consumer Privacy Act (CCPA)/California Privacy Rights Act (CPRA)
• General Data Protection Regulation (GDPR)