A MoFo Privacy Minute Q&A: What Organizations Can Do to Plan for Steal Now, Decrypt Later Attacks

Question: I’ve read about “Steal Now, Decrypt Later” attacks. What should we be doing now to respond when “secure data” is compromised? Answer: Traditional encryption methods have long functioned as a key protective data security measure, making data seemingly indecipherable. Because of this, incidents involving encrypted personal data generally do not trigger breach notification requirements under U.S. and global privacy frameworks unless the encryption key has also been compromised….
By: Morrison & Foerster LLP