European Court of Justice invalidates US-EU Safe Harbor program – How to continue transferring data in light of ruling

On October 6, 2015, the European Court of Justice (“ECJ”) invalidated the US-EU Safe Harbor Framework (“Safe Harbor”). This ruling will have far-reaching consequences. The Safe Harbor allowed U.S. companies to receive EU citizens’ personal data from the EU if the U.S. companies complied with the Safe Harbor requirements.  The Safe Harbor greatly facilitated the transfer of private personal data from the EU to the U.S. by avoiding the necessity of U.S. organizations having to comply with the much stricter EU Data Protection Directive and by allowing the U.S. Federal Trade Commission and Department of Transportation to enforce

Read More


European Court of Justice invalidates US-EU Safe Harbor program – How to continue transferring data in light of ruling

October 6th, 2015
Data Centers

On October 6, 2015, the European Court of Justice (“ECJ”) invalidated the US-EU Safe Harbor Framework (“Safe Harbor”). This ruling will have far-reaching consequences. The Safe Harbor allowed U.S. companies to receive EU citizens’ personal data from the EU if the U.S. companies complied with the Safe Harbor requirements. The Safe Harbor greatly facilitated the transfer of private personal data from the EU to the U.S. by avoiding the necessity of U.S. organizations having to comply with the much stricter EU Data Protection Directive and by allowing the U.S. Federal Trade Commission and Department of Transportation to enforce compliance

Read More


Data Security & Corporate Governance: What Is The Individual Liability Of Officers & Directors?

by Larry Kunin, Partner and Chair of MMM Data Security & Breach Practice
     Brian Levy, Associate and Member of MMM Data Security & Breach Practice

A lot has been publicized regarding the need for data security, and the damages and tasks that face a company when a breach happens.  What about the individual liability officers and directors?   Do they face an individual legal obligation to ensure the data breach risks are at a minimum?  Do they face ultimate liability?

Officers and directors have a fiduciary duty to their corporations, including using competent business judgment, exercising good

Read More




MMM Client Alert: DARPA Cyber Grand Challenge Hopes to Automate Cybersecurity Defense

by Bradford G. Schweizer 

The Defense Advanced Research Projects Agency (DARPA) has launched a two-year cybersecurity competition that aims to have competing teams create fully automated network security systems. These systems are intended to be capable of reasoning through the flaws that create software vulnerabilities, formulating the appropriate software patches, and then deploying the patches on a network to fix the problem in real time. DARPA has called this competition the Cyber Grand Challenge (CGC). Here is a link to an overview.

In the Cyber Grand Challenge, competitors will compete in a qualifying event by presenting a system that can automatically identify,

Read More