NSL Podcast Series: Part 2 on the U.S. "Patchwork Quilt of Regulation" and the Timeline of a Breach
Time 2 Minute Read

In part two of our podcast by Never Stop Learning, Lisa Sotto, partner and chair of Hunton Andrews Kurth’s Privacy and Cybersecurity practice, and Eric Friedberg, Co-President of Stroz Friedberg, LLC, and Aon’s Cyber Solutions Group, discuss the fragmented nature of data security law in the U.S. and abroad. Sotto notes that the “patchwork quilt of regulation” in the U.S. regarding data security makes it difficult for companies to know what rules to implement. She stresses that the severity of cyber attacks has increased significantly over the past decade.

As Sotto and Friedberg discuss the timeline of a breach, they note that only 60% of breach incidents are internally identified. And due to new laws and social media pressure, the speed with which individuals expect to be notified of breach events is increasing. This can prove difficult given that all the facts surrounding a breach event may not be known, forcing companies to occasionally backpedal on initial public statements. While the nature of such speedy breach responses can lend themselves to uncertainty, Sotto is sure of one thing—if you don’t frame the issue, you can be sure others will do it for you.

Listen to Part 2 of the podcast.

The final segment will be released in the coming weeks. If you missed it, listen to Part 1.

For more information on Never Stop Learning (“NSL”) and to subscribe to the NSL Double Talk podcast, please visit their website.

You May Also Be Interested In

Time 2 Minute Read

On March 3, 2026, the Virginia Attorney General appealed a federal court’s grant of a preliminary injunction barring the enforcement of a new Virginia law requiring age verification and a time limit on social media use by minors under the age of 16 pending a final determination on the merits.    

Time 2 Minute Read

On February 23, 2026, a Joint Statement on AI-Generated Imagery was published by 61 data protection authorities. The Joint Statement addresses concerns regarding AI systems capable of generating realistic images and videos depicting identifiable individuals without their knowledge or consent.

Time 2 Minute Read

On February 18, 2026, Virginia Attorney General Jay Jones announced that his office intends to fully enforce new provisions of the Virginia Consumer Data Protection Act restricting minors’ use of social media.

Time 1 Minute Read

In January 2026, new and amended comprehensive U.S. state privacy laws, as well as U.S. state laws regulating social media platforms and artificial intelligence, went into effect.

Search

Subscribe Arrow

Recent Posts

Categories

Tags

Archives

Jump to Page