You lost data, unfortunately… Who will knock on your door and why
summary
Claim: every organization faces inevitable data loss and must map data types, location and access because regulators and plaintiffs act fast. Evidence: 16 billion breached records cited, Equifax triggers 390+ civil suits and ~$700M in costs, many states drop the notification threshold to 250 records, GDPR and CISA enforce a 72-hour GDPR/CISA window. Built artifacts: breach notification timelines, substitute-notice rules and automation templates; recommended controls include risk-based pen tests, patch hygiene, DSPM and vendor access monitoring.
AI-written summary · about
chapters (9)
- 0:00Introduction and thanks
- 1:28Why data breach risk matters
- 8:21Stakeholders who can sue you
- 14:04Key regulations and laws
- 23:18Standing to sue and harm assessment
- 31:21GDPR and breach notification
- 35:47Creating a breach response plan
- 36:29Case studies and lessons learned
- 42:08Key takeaways and resources
related talks
22mThe Data Breach vs The Ethics Breach: How to Prepare for Both
25mWhen GDPR and CCPA strike
40mData Breaches: Barbarians in the Throne Room
26mPrivacy Issues in Big Data Processing in light of Data Breaches
50mEnsuring Data Defensibility in an Era of Inevitable Breaches
55mWho You Gonna Call: The Quest for a National Data Breach Reporting Law
28mBreaches Are Everywhere; What's a Good Security Leader to Do
37mData Breaches: Barbarians in the Throne Room