Responsibility for data privacy and cybersecurity causes anxiety and sleep deprivation for chief information officers, general counsels and CEOs for good reason.

Virtually every day, headlines recount the miseries of a newly hacked company. What are the standards, expectations and legal liabilities for corporations confronting this risky new environment?