In This Issue:

- The Critical Takeaway for Every Company From the Sony Cyber Attack

- Sony Data Breach Class Action Complaint Provides Insight Into Cybersecurity Issues

- Reminder: New California Data Protection Laws Went Into Effect January 1

- New Federal Cybersecurity Laws May Create Momentum Toward More Legislation

- NIST to Provide Guidance on Implementing its Cybersecurity Framework

- New York Department of Financial Services Implements New Cybersecurity Examination Procedure

- EU’s Article 29 Working Party Looks to Standardize Review of Model Contract Clauses

- Developments in the Target Lawsuits

- Illinois Federal Court Dismisses Privacy Class Action Against P.F. Chang’s for Lack of Standing

- Excerpt from THE CRITICAL TAKEAWAY FOR EVERY COMPANY FROM THE SONY CYBER ATTACK:

This time last year, media and privacy experts were singularly focused on the cyber attack on Target and the lessons companies could learn from such a major attack. While many companies heeded these lessons, many more viewed the Target incident as inapplicable to their own businesses. In their view, since they did not have a large-scale retail presence or did not collect consumer credit card information, cyber attacks such as the one that hit Target (and many more in 2014) were problems for another industry...