Program Details
2026-11-05 12:00:00
Over 1,000+ webinars
Course Overview
2026-11-05 12:00:00
2h CLE Credits
Intermediate
2
12:00 pm - 1:00 pm ESTThis session teaches small firm attorneys how to conduct and document a security assessment that satisfies the ‘reasonable efforts’ standard under Model Rule 1.6(c) and its state equivalents. Attendees learn how ethics opinions, enforcement actions, state safe-harbor statutes, and class action litigation define what security controls, vendor oversight, and governance policies a small firm must have in place. Attorneys leave with a practical framework — anchored in the NIST Cybersecurity Framework and ABA formal guidance — for evaluating gaps, prioritizing fixes, and creating the documentation that regulators and plaintiffs’ attorneys will demand after a breach.
Kathryn C. Nadro 1:10 pm - 2:10 pm ESTThis session examines what attorneys must do after a data breach has occurred, covering the parallel tracks of ethics obligations and statutory breach-notification duties, client communication requirements under Model Rules 1.1, 1.4, 1.6(c), 5.1, and 5.3, and the disciplinary and malpractice exposure that follows inadequate response. Attorneys will learn how to distinguish ethics-triggered notification from statute-triggered notification, how ABA Formal Opinion 483 and NYC Bar Formal Opinion 2024-3 frame post-breach duties, and what common mistakes create disciplinary and civil liability. Attendees leave with a framework for managing breach response in a way that satisfies both bar authorities and state breach-notification laws while preserving privilege over forensic investigations.
Tricia Y. WagnerKatie Nadro is a Partner in the Corporate Group of Levenfeld Pearlstein, LLC in Chicago, where she advises clients on cybersecurity, data privacy, and artificial intelligence matters. She counsels businesses and their leadership on the full data lifecycle — from how information is collected, used, and shared to how it is secured, governed, and defended when something goes wrong. Ms. Nadro drafts and implements privacy and security policies, manages compliance programs under evolving state, federal, and international data-protection regimes, and leads clients through data breach response when an incident occurs. Uniquely, she pairs that counseling practice with a deep background as a seasoned business litigator and former in-house counsel, giving her a first-hand understanding of how a lawyer’s own data-security duties, privilege obligations, and breach-notification requirements play out in real disputes.
Tricia Wagner is Counsel in the Data Privacy, Security, Safety & Risk Management practice of Lowenstein Sandler LLP, based in the firm’s Washington, D.C. office. A rare lawyer-technologist, she brings more than 20 years of hands-on experience in cybersecurity, information governance, and compliance to her practice, having spent most of her career on the operational side of security before advising clients from the law-firm side. Ms. Wagner develops strategies that address data across its entire lifecycle, translating complex regulatory requirements under frameworks such as the CCPA, HIPAA, and the GDPR into concrete operational practices. She leads multidisciplinary teams, designs incident response protocols, and helps organizations build the security programs and governance evidence they need to withstand regulatory, client, and litigation scrutiny after a breach.
Katie Nadro is a Partner in the Corporate Group of Levenfeld Pearlstein, LLC in Chicago, where she advises clients on cybersecurity, data privacy, and artificial intelligence matters. She counsels businesses and their leadership on the full data lifecycle — from how information is collected, used, and shared to how it is secured, governed, and defended when something goes wrong. Ms. Nadro drafts and implements privacy and security policies, manages compliance programs under evolving state, federal, and international data-protection regimes, and leads clients through data breach response when an incident occurs. Uniquely, she pairs that counseling practice with a deep background as a seasoned business litigator and former in-house counsel, giving her a first-hand understanding of how a lawyer’s own data-security duties, privilege obligations, and breach-notification requirements play out in real disputes.
Tricia Wagner is Counsel in the Data Privacy, Security, Safety & Risk Management practice of Lowenstein Sandler LLP, based in the firm’s Washington, D.C. office. A rare lawyer-technologist, she brings more than 20 years of hands-on experience in cybersecurity, information governance, and compliance to her practice, having spent most of her career on the operational side of security before advising clients from the law-firm side. Ms. Wagner develops strategies that address data across its entire lifecycle, translating complex regulatory requirements under frameworks such as the CCPA, HIPAA, and the GDPR into concrete operational practices. She leads multidisciplinary teams, designs incident response protocols, and helps organizations build the security programs and governance evidence they need to withstand regulatory, client, and litigation scrutiny after a breach.
Requirements
The Alabama State Bar MCLE Commission requires attorneys to complete 12 credits, including 1 ethics, by December 31 of each year. All credits must be reported by February 15 of the following year. A maximum of 12 credits, including 1 ethics credit, may be carried over for 1 year only.
Formats
