Alyssa Watzman Quoted in JD Supra Article on Data Privacy Considerations When Engaging Third-Party Vendors
Denver, Colo. (May 11, 2021) - Denver Partner and Co-Chair of Lewis Brisbois’ Data Privacy & Cybersecurity Practice Alyssa R. Watzman was recently quoted by JD Supra in an article titled “Lawyers Encouraged to Vet Tech Vendors Carefully,” which discusses how law firms can reduce their exposure to cyber events by carefully managing their relationships with third-party vendors.
As the article describes, litigation support vendors, employee benefits providers, and network providers with which law firms work all house confidential information concerning firms’ clients and employees. The vendors’ possession of this information poses a security risk to the firms, particularly if the vendors’ networks are compromised during a cyber event.
Ms. Watzman told JD Supra that law firms should vet all parties that have access to the firm’s information, noting, “There is a lot to think about in terms of third-party risk when you are entering into a relationship with a service provider.” She recommended that when hiring a service provider, “firms should do their due diligence thoughtfully. Do not make hiring decisions based on word of mouth alone, or hire simply because the service provider is well-known. Talk to them about what their own security measures are and what their own employee training practices are.”
In addition, Ms. Watzman explained that firms should scrutinize their contacts with service providers and be certain that they are comfortable with the limitations of liability in the contract, the service provider obligations to notify the firm in the event of a network breach, and the amount of cyber insurance the provider is holding. She also stressed the importance of ensuring that contracts meet current data security needs and revisiting these contracts to keep them up to date.
Ms. Watzman regularly advises companies as they anticipate cybersecurity threats, including by providing incident response plans and facilitating tabletop exercises. She also represents these clients as they address data security incidents and related third-party civil litigation. In addition, Ms. Watzman assists companies in complying with the requirements of state data breach notification statutes as well as various federal regulations and statutes.
You may read the full JD Supra article here.
**Lewis Brisbois has been nominated for two Advisen Cyber Risk Awards! Vote for Lewis Brisbois as “Cyber Risk Event Response Team of the Year” and “Cyber Law Firm of the Year” here.**