Continuing Education Information Sheet

• Summarize the 2023 data breach and threat landscape
• Explain new and proposed SEC cyber rules
• Extract lessons from defining 2023 cyber litigations
• Anticipate cyber litigation concerns for 2024

Intended audience: Litigators and in-house counsel tracking cybersecurity litigation and regulatory trends.

Level: intermediate

Prerequisites: None

• Daniel B. Garrie, Founder, Law & Forensics; Neutral at JAMS; Faculty at Harvard

  Law & Forensics LLC · JAMS · Harvard · Rutgers Law School · Journal of Law & Cyber Warfare

  Daniel B. Garrie is the founder and executive managing partner of Law & Forensics LLC, a boutique cybersecurity and forensic engineering firm he co-founded in 2008. He serves as a neutral, arbitrator, and forensic special master at JAMS, focusing on cybersecurity, cryptocurrency, and complex technology disputes, and holds faculty appointments at Harvard and Rutgers Law School. A patented software inventor and prolific author, he is editor-in-chief of the Journal of Law & Cyber Warfare and a widely cited authority on computer forensics, eDiscovery, and cyber litigation.

• Thomas Vanaskie, Of Counsel, Stevens & Lee (Hon., Ret.)

  Stevens & Lee

  The Honorable Thomas I. Vanaskie is Of Counsel at Stevens & Lee, where he chairs the firm's Appellate and Mediation, Neutral Services, and Alternative Dispute Resolution practice groups. He served as a judge on the U.S. Court of Appeals for the Third Circuit from 2010 to 2018 and, before that, as a district judge on the U.S. District Court for the Middle District of Pennsylvania for 16 years, including seven as chief judge. Over more than four decades in the legal profession he has litigated or overseen hundreds of complex cases and now serves as a mediator, arbitrator, and court-appointed special master.

• Brian Levine, Former EY-Parthenon Managing Director, Cybersecurity and Data Privacy, Ernst & Young LLP

  Ernst & Young

  Brian Levine is a cybersecurity and data privacy lawyer who served as EY-Parthenon Managing Director, Cybersecurity and Data Privacy at Ernst & Young LLP, leading a cybersecurity and data privacy team focused on the strategic application of security in the context of capital transactions, including mergers, acquisitions, divestitures and restructurings. He joined EY from the U.S. Department of Justice, where he served as the National Coordinator for more than 300 federal prosecutors focused on investigating and prosecuting computer crime and intellectual property crime, and served as a federal prosecutor and senior counsel with the DOJ's Computer Crime and Intellectual Property Section. Earlier he served as an Assistant Attorney General for the Internet & Technology Bureau of the New York Attorney General's Office. He earned his BA from the University of Pennsylvania and his JD from New York University School of Law. At Legal Cyber Academy, Brian Levine teaches on vendor and data breach risk, financial-sector cybersecurity, and cyber litigation trends.

• David Hamilton, Managing Counsel, Global Privacy and Security

  Fiserv

  David Hamilton is Managing Counsel for Global Privacy and Security at Fiserv, the Fortune 250 fintech and payments company (which includes its Clover payments business). His work spans privacy and data protection regimes including GLBA, GDPR, CCPA, LGPD, PIPEDA, HIPAA, CAN-SPAM, and TCPA, with extensive experience representing financial institutions and FinTechs. He began his career in law and technology in Northern Ireland and has practiced law in New York for over a decade. He is accredited by the IAPP as a Certified Information Privacy Professional (CIPP/US).

• Jeffrey Caso, Expert Associate Partner, McKinsey & Company

  McKinsey & Company

  Jeffrey Caso is an expert associate partner in McKinsey & Company's cybersecurity practice, based in the firm's Washington, DC office. He works on market growth strategy, digital risk and technology strategy, and on business-building in cybersecurity with enterprises, investors and leading cybersecurity providers. He co-leads Cyber Threat Snapshot, McKinsey's deep web threat intelligence offering, and has published on cyberwarfare, privacy regulation and the impact of COVID-19 on cyber markets. He holds a B.S.F.S. in science, technology and international affairs from Georgetown University. At Legal Cyber Academy he teaches on the U.S. National Cybersecurity Strategy, cyber litigation trends, and board cyber readiness.

Legal Cyber Academy is not an accredited provider; the notes below explain how a learner may self-submitthis activity where their board permits. The pathways shown reflect this course’s subject matter. Always confirm your board’s current rules.

• Finance/securities subject matter — may support CPE where your state board accepts non-NASBA-registered activities.

• CLE (attorneys)up to 1.0 hr (60-min basis)

  Many U.S. jurisdictions let an attorney apply for CLE credit for a non-accredited program (often called individual attorney or self-application). Use this certificate plus the course Information Sheet as your supporting documentation. Your state bar or CLE board decides whether credit is granted, how much, and any self-study cap.

• CE / CPD (privacy, insurance, IT)up to 1.0 hr (60-min basis)

  Where your professional body recognizes self-reported or self-directed learning (CPD) — for example many privacy (CIPP/CIPM) and security certifications — record this activity using the certificate and Information Sheet. Confirm your program's self-reporting rules and any documentation it requires.

• CPE (accountants)up to 1.2 hr (50-min basis)

  NASBA CPE uses a 50-minute credit hour and has strict self-study standards (registered sponsors, word-count-per-credit, and qualifying review questions). This course is NOT a NASBA-registered self-study program. Some state boards accept non-registered activities at their discretion — verify with your board before claiming CPE.