An expanding array of privacy, legal and regulatory risks are arising from cybersecurity threats in the emerging data environment. As the first line of response, security leaders need to understand key statutory obligations in the event of a cyberattack. Adam Kardash, one of Canada’s foremost data privacy experts, discusses the legal meaning of “reasonable” security safeguards, with an outline of the requirements and practical impact of the Canadian security incident notification regime. Kardash will also share lessons learned from security incidents, with a snapshot of the key steps organizations take to mitigate cybersecurity risk.