How to Draft a Vendor Cybersecurity Addendum That Limits Liability After a Data Breach Under New York Law
A well-drafted vendor cybersecurity addendum can cap breach-related exposure through three core levers: tight indemnity language, a defined liability cap, and clear security/notice duties. Under New York law, these clauses are generally enforceable in commercial contracts when negotiated and not barred by public policy. This article explains how to draft an addendum that reduces post-breach […]