Nothing gets the blood pumping quite like insurance talk. “The State of Data Breach Litigation: What You Need to Know and How to Protect Yourself” session delivered a few pro tips on how to handle the aftermath of a data breach.

The precise order of the steps they outlined may vary from jurisdiction to jurisdiction — hello, General Data Protection Regulation and California Consumer Protection Act — but sooner or later all breached parties should expect to encounter some tough questions about when to bring insurance carriers or even their own customers into the fold.