Lawyers: Companies spend more on post-breach responses amid new notification laws, cyber hygiene shortfalls

Companies are spending more resources than ever responding to data breaches -- and trying to avoid liability -- in the wake of new laws like the European Union's General Data Protection Regulation, but continue to under-invest in basic preventative practices on the basis of cost, according to members of the law firm BakerHostetler, which issues an annual data security incident response report.

“It's become a lot more expensive in litigation to deal with situations where the client has wanted to...