Know The Law
Data breaches are dealt with differently in different jurisdictions, which means laws vary from country to country and from state to state. Failing to understand the differences can increase liability exposure, which may take the form of fines in addition to lawsuit costs.
"Most businesses have no idea what the law is on this. Know the law. Read it at a minimum, look it up online, or even better, hire a lawyer to help you develop a system to respond to a data breach," Goodnow said.
Also, consider a security audit from a credible third party. If your company is sued, and you've implemented the changes recommended by the auditor, it may help convince a jury that your company did, in fact, take reasonable steps to secure information, according to Goodnow.
(Image: tpsdave via Pixabay)