May 22, 2020
A handful of recent lawsuits challenging retirement plan managers' lax cybersecurity policies and use of workers' data for marketing purposes could shed light on an area of the Employee Retirement Income Security Act that has long been shrouded in mystery: employers' cybersecurity and data privacy obligations.