Whenever a substantial amount of consumer information is involved in a data breach, a class action is virtually inevitable. In this article, we offer a comprehensive look at the regulatory and litigation implications of data breaches, including recent developments in class action litigation, the impact of recent Supreme Court decisions on regulatory agencies, regulatory and enforcement activity by the FTC, SEC and other government bodies concerning cybersecurity and data privacy, and the evolving duties of Delaware boards of directors. Insights on these topics were offered by Orrick partner Douglas H. Meal and Sidley partner Alan Charles Raul at the Practising Law Institute's Twenty-Fourth Annual Institute on Privacy and Cybersecurity Law. See “A Look Inside Businesses’ Private Disputes Over Ransomware Costs” (Aug. 18, 2021).