This article appeared in Cybersecurity Law & Strategy, an ALM publication for privacy and security professionals, Chief Information Security Officers, Chief Information Officers, Chief Technology Officers, Corporate Counsel, Internet and Tech Practitioners, In-House Counsel. Visit the website to learn more.

The most common questions and key elements of a negligence claim are whether the defendant breached a duty of care, whether there is any injury as a result of the defendant’s breach of any purported duty of care, and whether the defendant’s alleged breach caused the plaintiff any damages. While these essential questions and elements apply with equal force in data breach litigation involving as few as two parties and as many as thousands in the form of class action litigation, the difficult question to answer in these cases is “what is the value, if any, of your injury or damages?”