This session from STRONGER 2023 examined the process, substance, and possible outcomes of Attorneys General and OCR investigations. The states vary widely; however, there are a few consistencies that businesses can always expect and plan for. To that end, planning for a regulatory investigation begins well before a business experiences a cyber incident and can significantly impact the outcome of any investigation.