Cybersecurity

building with windows and reflectionbuilding with windows and reflection

Cybersecurity

Hope is not a plan. By working with our global cybersecurity lawyers, you will be better prepared for any cyber-attack.

Whichever industry you work in, securing your data, technology and systems from both internal and external hacks is critical.

The consequences of a serious cyber breach can stretch far beyond the initial hack, and can lead to extensive reputational damage, business interruption, regulatory scrutiny and litigation.

The key is to plan ahead, both from an IT and legal perspective, and that is where we can help. Our experienced cybersecurity lawyers are always available, providing full spectrum support from preparedness to response, internal investigation to notifications and media communications, and representation before regulators to class action defense. Whether it's ransomware, coding glitches, emails or staff gone astray, we can help you understand the civil and criminal law implications and make informed choices.

As a deeply-integrated global practice, we are also exceedingly well-versed in coordinating compliance, notifications, regulatory responses and litigation across jurisdictions, including for the world’s largest companies. Additionally, our worldwide reach means that, should the worst happen, there is always someone working for you.

Our global lawyers can help you with all aspects of data cybersecurity law. Notable experience in this field includes:

  • designing and operationalizing breach response policies and procedures to cover over 24 global jurisdictions, including the 50 US states, Puerto Rico, the UK and the EU for a Fortune 50 publicly traded technology company
  • providing full-spectrum advice for a global medical device manufacturing company which suffered multiple data breaches, including a ransomware attack impacting their global operations
  • representing the subsidiary of one of the largest financial services firms in the publicly announced FCA and ICO enforcement investigation, following a significant cybersecurity breach in the US. This continues to be one of the largest incidents reported in recent times, and we have worked closely with the client to ensure consistency in approach across multiple jurisdictions and multiple contemporaneous regulatory investigation and claims activity
  • advising a large US health insurer on a high-profile breach that affected more than one million individuals. The response required public notification (including state and HIPAA notifications), and class-action defense (three jurisdictions and cert petition to the US Supreme Court). Additionally, we engaged with the FBI and the US National Cyber Investigative Joint Task Force relative to the incident
  • advising an international bank and a global life sciences client on major programs to revise procurement contracting processes and the clauses they adopt globally for cybersecurity to comply with international sector and subject matter laws in their vendor management programs

Areas In Data Privacy, Security and Technology

Key contacts

saramalmgren@eversheds-sutherland.se

Sara Malmgren

Partner

Stockholm, Sweden

torbjornlindmark@eversheds-sutherland.se

Torbjörn Lindmark

Managing Partner

Stockholm, Sweden

Latest Insights

Latest News

179087012_m

guides and reports

September 10, 2026

EU Cyber Resilience Act: Single Reporting Platform Goes Live

new-210716168_l

legal updates

September 07, 2026

Cyberresiliensförordningen (CRA) gör cybersäkerhet till en produkt- och led...

Radiant Fiber Optics

guides and reports

September 07, 2026

Är ledningen redo att ta ansvar för cybersäkerheten?

Modern glass building with unique exterior design

legal updates

September 02, 2026

Commercially Connected shorts - 2 September 2026

© Eversheds Sutherland 2026. All rights reserved. Eversheds Sutherland is a provider of legal and other services operating through various separate and distinct legal entities. For further information about these entities and Eversheds Sutherlands' structure please see the Legal Notice page of this website.

Eversheds Sutherland is the name and brand under which the members of Eversheds Sutherland Limited (Eversheds Sutherland (International) LLP and Eversheds Sutherland (US) LLP) and their respective controlled, managed and affiliated firms and the members of Eversheds Sutherland (Europe) Limited (each an "Eversheds Sutherland Entity" and together the "Eversheds Sutherland Entities") provide legal or other services to clients around the world. Eversheds Sutherland Entities are constituted and regulated in accordance with relevant local regulatory and legal requirements and operate in accordance with their locally registered names. The use of the name Eversheds Sutherland, is for description purposes only and does not imply that the Eversheds Sutherland Entities are in a partnership or are part of a global LLP. The responsibility for the provision of services to the client is defined in the terms of engagement between the instructed firm and the client. For further information about these Eversheds Sutherland Entities and Eversheds Sutherlands’ structure please see the Legal Notices page of this website.