DOJ official addresses liability concerns stemming from Uber CSO case
By 
Aaron Nicodemus2022-12-12T20:05:00
A Department of Justice (DOJ) official called the conviction of a former Uber Technologies chief security officer (CSO) on obstruction charges an “outlier” that should not discourage compliance officers from self-reporting violations.
In remarks made Dec. 6 at an American Bankers Association conference, Principal Associate Deputy Attorney General Marshall Miller said the agency’s pursuit of obstruction and concealment charges against former Uber CSO Joseph Sullivan “stemmed from an extreme set of actions that represent an acute outlier from regular compliance practice.”
Some in the compliance and cybersecurity community expressed concern following the October verdict that it could set a new standard for individual liability regarding company data breaches. Miller acknowledged this during his remarks.
Related articles
-
News BriefEx-Uber security chief avoids prison in obstruction case
The former chief security officer of Uber Technologies was sentenced to probation by a federal court judge as punishment for his involvement in covering up a 2016 data breach that affected 57 million users.
-
PremiumStudy: Healthcare overtakes finance as most breached industry in 2022
Healthcare organizations were under attack more than ever by cybercriminals in 2022, overtaking finance as the most breached industry, according to the latest analysis from Kroll.
-
ArticleUber CSO ruling fallout: Individual liability extends to data breach response
The case of the Uber chief security officer found guilty by a jury on two felonies for covering up a data breach and misleading federal regulators opens up another potential individual liability issue executives handling cyber incidents face, according to legal experts.
More from Regulatory Enforcement
-
ArticleGeorgia Tech to pay $875,000 for allegations brought by compliance officers
Georgia Tech Research Corp. (GTRC) has agreed to pay $875,000 to settle allegations first raised by two compliance officers that its cybersecurity protocols violated acceptable standards for defense contractors, the Department of Justice (DOJ) said.
-
ArticleTractor Supply Company hit with $1.35M fine for alleged California privacy violations
Tractor Supply Company has agreed to get into compliance with California’s consumer privacy law and to pay a $1.35 million fine—the largest yet by California—to settle allegations it violated the privacy rights of customers and job applicants.
-
Basic PageLuminUltra fined $685K by BIS for illegal shipment to Iran
A single $33,000 shipment to Iran triggered a six-figure penalty and years of compliance oversight for biotechnology company LuminUltra Technologies, Inc.