News Insights: Delta Sues Chatbot Vendor Faulted for Data Breach

News Insights:

Gary Roboff, Senior Advisor, Shared Assessments  said, “What’s particularly interesting about this situation is that Delta seems to have had contract provisions (“adequate security, including encryption” according to the article) and had its provider sign a GDPR compliance addendum in February 2018 requiring immediate breach notification, five months before notifying Delta about the breach. Delta says its vendor was aware of the breach when it signed that agreement. That said, if Delta actually used the words “adequate security” instead of defining more precisely what good security hygiene means, that could be a problem.”