“With the news that Target intends to wait until it files its annual report in March with the Securities and Exchange Commission (SEC) on the investment consequences of its massive cybersecurity intrusion from 2013, the SEC and cybersecurity once again gains attention,” write Jenner & Block’s Mary Ellen Callahan, CIPP/US, and Elaine Wolff. In this post for Privacy Perspectives, Callahan and Wolff look into the SEC’s guidance on cybersecurity, including recent comments by the agency that “underscore the need to disclose costs associated with any preventative or remedial measures that may have a material effect on a company’s results of operations, liquidity and financial condition.” The Target incident, they point out, “highlights some of the limitations in the SEC guidance.” Editor’s Note: Callahan and Wolff will speak as part of a panel discussion on the SEC and cybersecurity at the IAPP Global Privacy Summit, March 5-7, in Washington, DC.
Full Story