OPP Neuro SPA

“In assessing the application of law, an entity must understand and take into account its size, overall risk profile and the nature, scale and complexity of the services, and activities and operations it undertakes,” said Massey.

“This is critical for every single organization. For me, I’d focus on this more than anything else when you think about compliance programs, and understand how cybersecurity trends are changing. It’s not really how they’re changing generally, but how they’re changing for you contextually within your organization.”

#Infosec2024: 104 EU Laws Have Different Definitions of Cybersecurity Top lawyer outlines how firms can better manage legal risk amid complex regulatory landscape