Morrison & Foerster’s David Newman: How Corporate Counsel Should Approach Hacker-Powered Security

This interview with MoFo counsel David Newman provides practical and legal guidance for organizations adopting vulnerability disclosure policies and bug bounty programs, emphasizing the need for clear program scope, stakeholder alignment (GC, CISO, business), formal internal processes, attention to privacy and regulatory regimes (e.g., GDPR), and the value of consulting public guidance and outside counsel to reduce legal and reputational risk.