In litigation over data protection, judges are often tasked with deciding whether a company did all it could to protect the plaintiffs’ data, especially when they hear a motion to dismiss or a motion for summary judgment.

However, at the 2018 NetDiligence Cyber Risk Summit in Philadelphia on Wednesday, it was the judges who found themselves trying to explain their own data protection practices.