-
“include specific data security procedure obligations in contracts with vendors
-
verify a vendor’s capacity to adhere to the prescribed data security procedures
-
look at data security practices from an expert’s perspective to determine whether such practices are reasonable”
National Law Review | Piercing Outsourcing Veil: FTC Says Data Security Obligations Remain