"A number of legal questions remain unanswered and there is an acute need for comprehensive guidance from the DOL. These questions include: [1] what is the specific personal and/or confidential participant information that must be safeguarded by plan fiduciaries; [2] what standard of care applies to the protection of participant personal information; [3] what is the plan administrator's responsibility with respect to disclosing to participants the unauthorized appropriation of participant information; and [4] whether state cybersecurity, privacy, consumer protection or other laws are pre-empted by ERISA."  MORE >>