Cybersecurity and ERISA Retirement Plans: Risks and Best Practices for Plan Sponsors and Fiduciaries

Welcome! Strafford is now BARBRI! The expert courses you know from the trusted global leader in legal education.
Course Details
- smart_display Format
On-Demand
- signal_cellular_alt Difficulty Level
Intermediate
- work Practice Area
ERISA
- event Date
Wednesday, October 25, 2023
- schedule Time
1:00 p.m. ET./10:00 a.m. PT
- timer Program Length
90 minutes
-
This 90-minute webinar is eligible in most states for 1.5 CLE credits.
-
Live Online
On Demand
This CLE course will provide guidance to plan fiduciaries, ERISA counsel, and service providers on trends in data breaches of ERISA benefit plans, discuss the current scope of fiduciary obligations and best practices to protect benefit plan data, and review risk mitigation considerations.
Description
Cybersecurity is an increasingly serious issue for many industries. Recent data breaches across a variety of companies demonstrate that benefit plans, sponsors, and service providers are not immune. Plan sponsors and fiduciaries must act proactively to develop a course of action to address these issues.
Aside from ERISA fiduciary duty principles, there is limited guidance regarding ERISA plan fiduciary duties with respect to privacy and security of plan data and data breaches. The liability for violations of ERISA fiduciary duties can be personal to the individual fiduciary.
Plan sponsors, fiduciaries, and service providers should identify risks and understand the nuances of applicable rules and regulations. In addition, effective privacy and security practices and response procedures should be implemented to minimize potential liability.
Listen as our panel provides guidance to benefits counsel on trends in data breaches in ERISA retirement plans. The panel will discuss the scope of fiduciary obligations to prevent breaches, industry standards, ERISA preemption of state data breach laws, and contractual risk mitigation with third-party administrators (TPAs).
Outline
- Trends in ERISA data breaches for retirement plans
- Lessons from recent data breaches and litigation
- ERISA fiduciary obligations concerning data breaches
- Incorporating cybersecurity protections into retirement plan contracts with TPAs and other service providers
Benefits
The panel will review these and other key issues:
- What lessons can be learned from recent breaches of retirement plan employee information and data?
- What should ERISA plan fiduciaries consider in developing benefit plan cybersecurity best practices?
- How can cybersecurity protections be incorporated into retirement plan contracts with service providers and TPAs?
- What specific obligations do plan sponsors and fiduciaries have when responding to an occurrence of a data breach?
Unlimited access to premium CLE courses:
- Annual access
- Available live and on-demand
- Best for attorneys and legal professionals
Unlimited access to premium CPE courses.:
- Annual access
- Available live and on-demand
- Best for CPAs and tax professionals
Unlimited access to premium CLE, CPE, Professional Skills and Practice-Ready courses.:
- Annual access
- Available live and on-demand
- Best for legal, accounting, and tax professionals
Unlimited access to Professional Skills and Practice-Ready courses:
- Annual access
- Available on-demand
- Best for new attorneys
Related Courses

ERISA Fiduciary Rules for Health and Welfare Plans: Compliance Requirements and Litigation Risks for Plan Sponsors
Tuesday, December 2, 2025
1:00 p.m. ET./10:00 a.m. PT

Mental Health Parity Rules and Requirements for Plan Sponsors and Administrators
Friday, September 26, 2025
1:00 p.m. ET./10:00 a.m. PT

2021 Consolidated Appropriations Act and Employee Benefits
Available On-Demand
Recommended Resources
Getting the Most Out of BARBRI Resources
- Learning & Development
- Business & Professional Skills
- Talent Development
Navigating Modern Legal Challenges: A Comprehensive Guide
- Business & Professional Skills
- Career Advancement