Cybersecurity

building with windows and reflectionbuilding with windows and reflection

Cybersecurity

Hope is not a plan. By working with our global cybersecurity lawyers, you will be better prepared for any cyber-attack.

Whichever industry you work in, securing your data, technology and systems from both internal and external hacks is critical.

The consequences of a serious cyber breach can stretch far beyond the initial hack, and can lead to extensive reputational damage, business interruption, regulatory scrutiny and litigation.

The key is to plan ahead, both from an IT and legal perspective, and that is where we can help. Our experienced cybersecurity lawyers are always available, providing full spectrum support from preparedness to response, internal investigation to notifications and media communications, and representation before regulators to class action defense. Whether it's ransomware, coding glitches, emails or staff gone astray, we can help you understand the civil and criminal law implications and make informed choices.

As a deeply-integrated global practice, we are also exceedingly well-versed in coordinating compliance, notifications, regulatory responses and litigation across jurisdictions, including for the world’s largest companies. Additionally, our worldwide reach means that, should the worst happen, there is always someone working for you.

Our global lawyers can help you with all aspects of data cybersecurity law. Notable experience in this field includes:

  • designing and operationalizing breach response policies and procedures to cover over 24 global jurisdictions, including the 50 US states, Puerto Rico, the UK and the EU for a Fortune 50 publicly traded technology company
  • providing full-spectrum advice for a global medical device manufacturing company which suffered multiple data breaches, including a ransomware attack impacting their global operations
  • representing the subsidiary of one of the largest financial services firms in the publicly announced FCA and ICO enforcement investigation, following a significant cybersecurity breach in the US. This continues to be one of the largest incidents reported in recent times, and we have worked closely with the client to ensure consistency in approach across multiple jurisdictions and multiple contemporaneous regulatory investigation and claims activity
  • advising a large US health insurer on a high-profile breach that affected more than one million individuals. The response required public notification (including state and HIPAA notifications), and class-action defense (three jurisdictions and cert petition to the US Supreme Court). Additionally, we engaged with the FBI and the US National Cyber Investigative Joint Task Force relative to the incident
  • advising an international bank and a global life sciences client on major programs to revise procurement contracting processes and the clauses they adopt globally for cybersecurity to comply with international sector and subject matter laws in their vendor management programs

Areas In Data Privacy, Security and Technology

Key contacts

saramalmgren@eversheds-sutherland.se

Sara Malmgren

Partner

Stockholm, Sweden

torbjornlindmark@eversheds-sutherland.se

Torbjörn Lindmark

Managing Partner

Stockholm, Sweden

Latest Insights

Latest News

Modern building interior with glass roof

legal updates

April 29, 2026

Commercially Connected - 29 April 2026

Modern city high‑rise buildings glass exterior

legal updates

April 22, 2026

Commercially Connected Shorts - 22 April 2026

43168937_XXL

legal updates

April 16, 2026

EU Digital Fitness Check consultation – implications for multinational bus...

Contemporary glass architecture structural framework detail

legal updates

April 15, 2026

Commercially Connected Shorts - 15 April 2026

© Eversheds Sutherland 2026. All rights reserved. Eversheds Sutherland is a provider of legal and other services operating through various separate and distinct legal entities. For further information about these entities and Eversheds Sutherlands' structure please see the Legal Notice page of this website.

Eversheds Sutherland is the name and brand under which the members of Eversheds Sutherland Limited (Eversheds Sutherland (International) LLP and Eversheds Sutherland (US) LLP) and their respective controlled, managed and affiliated firms and the members of Eversheds Sutherland (Europe) Limited (each an "Eversheds Sutherland Entity" and together the "Eversheds Sutherland Entities") provide legal or other services to clients around the world. Eversheds Sutherland Entities are constituted and regulated in accordance with relevant local regulatory and legal requirements and operate in accordance with their locally registered names. The use of the name Eversheds Sutherland, is for description purposes only and does not imply that the Eversheds Sutherland Entities are in a partnership or are part of a global LLP. The responsibility for the provision of services to the client is defined in the terms of engagement between the instructed firm and the client. For further information about these Eversheds Sutherland Entities and Eversheds Sutherlands’ structure please see the Legal Notices page of this website.