Lawyer: GDPR will affect ransomware reporting in U.S.

The European Union's General Data Protection Regulation will affect how U.S. companies deal with the rising threat of ransomware attacks, according to a leading privacy lawyer, by requiring the reporting of incidents even if the impact on data or systems is minimal.

If the event involves an “unplanned unavailability of that data,” entities will need to report the incident under the EU GDPR, said Harriet Pearson of the law firm Hogan Lovells. Pearson said the GDPR's expansive approach to data...