“While the strategy may protect companies in the case of a lawsuit, since much of a legal firm’s research would be considered privileged information, the legal layers also make the collection of breach data more difficult, says (Josephine Wolff, an assistant professor for cybersecurity policy at Tufts University’s Fletcher School of Law and Diplomacy). Wolff is collaborating with law professor Daniel Schwarcz at the University of Minnesota Law School and postdoctoral fellow in computer science Daniel Woods at the University of Innsbruck in Austria to determine whether the shift to using attorneys — and the protection that attorney-client privilege grants companies — is undermining organizations’ cybersecurity response.”
Source: Breach Response Shift: More Lawyers, Less Cyber-Insurance Coverage