Ransomware issues too often lost in the shuffle—part 2

Table of contents

• Notification and disclosure
• State verses federal notification
• State regulators
• HHS (eg hospitals and other medical service facilities)
• GLBA (eg consumer banks and loan companies)
• FTC guidance
• SEC (eg public companies)
• FINRA (eg financial firms such as brokers and dealers)
• Candor with regulator about a ransomware attack
• When a ransomware attack may also be a regulatory failure

More sections of this document available when you sign-in to Lexis+ or register for a free trial.

Article summary

Law360, New York: This three-part series provides specified insight and analysis into these two important areas of ransomware incident response in the United States. In this second article of the series, John Reed Stark, president of John Reed Stark Consulting LLC in the US, discusses two important issues can be easily overlooked following a ransomware attack—notification/disclosure responsibilities and anti-money laundering compliance.