Venable managing director of cybersecurity services Ari Schwartz was quoted in a September 28, 2016 FedScoop article on legal action against companies that suffer cyberattacks. Schwartz made his comment while speaking at a cybersecurity summit.
"Standard breach disclosure policy varies greatly dependent on individual state laws that oversee a victim company’s activities," said Schwartz. While affected businesses must usually ask law enforcement for permission to notify customers, Schwartz noted, "Except in extreme circumstances, law enforcement usually says that it is okay to do so."