Navigating Data Privacy and Cybersecurity Risks for ERISA-Regulated Plans: Key Issues for Plan Sponsors and Administrators
Recording of a 90-minute premium CLE video webinar with Q&A
This CLE webinar will provide guidance to employee benefits counsel on managing data privacy and cybersecurity risks for ERISA healthcare and retirement plans, lessons from recent data breaches, ERISA fiduciary obligations, ERISA preemption of state data breach laws, and contractual risk mitigation with third-party administrators (TPAs).
Outline
- Trends in ERISA data breaches: healthcare and retirement plans
- Lessons from recent litigation
- ERISA fiduciary obligations with respect to data breaches
- Trends in ERISA preemption litigation and what it portends for preemption of state data breach laws
- Incorporating cybersecurity protections into retirement plan contracts with TPAs
Benefits
The panel will review these and other key issues:
- What specific obligations do plan sponsors and fiduciaries have when responding to a data breach occurrence?
- How can plan sponsors manage their breach response to safeguard plan data, achieve an effective response, and reduce the risk of legal and regulatory action?
- What lessons can be learned from recent litigation and breaches of retirement plan employee information?
- How can cybersecurity protections be incorporated into retirement plan contracts with TPAs?
Faculty
Doug Davidson, CISA
Director of Information Technology Services
GBQ Partners
Mr. Davidson joined GBQ in 2016, bringing 30 years of experience working with technology and technology leadership in... | Read More
Mr. Davidson joined GBQ in 2016, bringing 30 years of experience working with technology and technology leadership in companies ranging in size from innovative, emerging businesses to Fortune 500s. Prior to joining the firm, he was President and CEO of Jacadis, a Columbus- based information security and information risk management firm. Previously, Mr. Davidson was Practice Leader for web technologies at SARCOM and FrontWay. He works with business leaders and executives to assess and improve the operationalization of information risk and information security programs. Mr. Davidson advises information security and compliance leadership in larger enterprises focusing on control assessment and improvement in areas such as security leadership, policy and procedure, security awareness, third-party risk management and compliance with HIPAA, PCI and ISO 27001. He is a recognized speaker, regularly presenting at local and regional business and professional organizations. Mr. Davidson is also a two-time faculty member of InfoSec World.
Close
José M. Jara
Counsel
Fox Rothschild
Mr. Jara has over 20 years of ERISA and employee benefits experience, ranging from governmental compliance, fiduciary... | Read More
Mr. Jara has over 20 years of ERISA and employee benefits experience, ranging from governmental compliance, fiduciary liability insurance, to the application of ERISA’s fiduciary standards and prohibited transaction provisions. Mr. Jara has extensive experience resolving issues for corporate plan sponsors and multiemployer plans before the U.S. Department of Labor, where he was formerly a senior pension law specialist and investigator.
Close