Data Privacy

Healthcare Data Security: Risks, Challenges, And Solutions

With sensitive patient information at risk, the demand for robust healthcare data security measures has always been a priority of healthcare organizations. A distinct challenge arises in effectively adapting security measures to current technologies and ever-changing cyber threats. This is no small feat, given the increasing sophistication of cyber threats. The risks are manifold, ranging from unauthorized access to sensitive h

Read article

Mitigating Growing Data Volumes: The Past, Present, and Future of Discovery

Data is being created and stored at rapid rate. By 2025, the International Data Corporation (“IDC”) estimates worldwide data will reach 181 zettabytes, representing a compound annual growth rate of 23% over the 2021-2025 period. The IDC also estimates a 19.2% CAGR in worldwide storage capacity over the same period, growing to above 16ZB. For organizations, such dramatic growth of stored

Read article

iOS 16: the Discovery Implications of Editing and Unsending iMessages

Last month, Apple announced that in their upcoming iOS 16 release, iMessage will include the ability to unsend (or “recall”) messages, as well as edit messages after sending. Naturally, our first reaction to this announcement was to ask ourselves: “How will these new features impact iMessage discovery?” This question was followed only by a further waterfall of questions: “Could these features be used to hide evidence? Would unsent or original messages

Read article

Preventing ROT Data Accumulation with In-Place Data Governance

Data never stops accumulating, which means that proactive measures are required to stay on top of data growth, even if you’ve just completed a ROT data cleanup. Investing in enterprise governance technology can supercharge your organization’s ability to preventing future ROT data accumulation. Information Governance platforms that empower organizations to manage data in place are especially well suited for this challenge. In-place data governance refers to analyzing, classifying, and governin

Read article

Using Technology to Identify and Delete ROT Data

In last week’s article, we discussed some of the potential risks in failing to proactively manage ROT and over-retained data in a world where data is growing at an exponential rate. As promised, in this week’s article, we’ll explore some of the ways to identify, manage and delete ROT data. If managing ROT data manually without the help of software were easy and time efficient, there would

Read article

Getting Started with Data Sensitivity Classification

Implementing an information governance tool to help manage sensitive data can sometimes feel like an overwhelming task. With regulations varying across jurisdictions and a bevy of new laws pending, it’s easy to find yourself in a state of decision paralysis, wondering: “where do I possibly begin?” Good news, this post was written for you! In this blog, we will propose that to begin to manage sensitive data, you should first classify data sensitivity into broad, widely applicable categories based

Read article

The CPRA – California’s New Data Privacy Mandate

What is the CPRA?# The California Privacy Rights Act (“CPRA”) is a new state-wide data privacy bill, also known as Proposition 24, passed into law on November 3, 2020. The CPRA significantly amends and expands the California Consumer Privacy Act (“CCPA”), which enforces an array of consumer privacy rights and business obligations regarding the collection and sale of personal information. In this article, we will

Read article

GDPR after Brexit: Top Questions Answered

GDPR after Brexit# The General Data Protection Regulation has been around for years, and you likely cannot make it through a news cycle without hearing the term “Brexit” yet, questions still abound about what they mean together. In case you missed it, the trade and cooperation agreement of 12/24/2020 outlined how data transfers will be treated going forward between the UK and the European Economic

Read article

The Devil's in the DSARs - How to operationalize your response

Executive Summary# Do not believe that you need to spend enormous amounts of money on technology to achieve compliance Acknowledge that risk analysis is key to determine where investments are truly needed Metric tracking from the start is the most essential data for better risk analysis and process improvement Understand the rights you are afforded as a company to defend against weaponized requests Consider every DSAR request fulfillment as an audit of your response stra

Read article

Rational Speaks with Kurt Wimmer of Covington & Burling on Data Privacy and Security

Tom Preece, Rational’s Business Development Manager, recently spoke with Kurt Wimmer about his thoughts on emerging data privacy and security trends and how organizations should begin to address these risks. Kurt Wimmer is the U.S. chair of Covington & Burling’s Data Privacy and Cybersecurity practice and is the immediate past chair of the Privacy and Information Security Committee of the American Bar Association’s Antitrust Section. Tom Preece: You have written in the past about h

Read article

39. Rational Speaks with Ted Augustinos of Locke Lord LLP on Information Security

Tom Preece, Rational’s Business Development Manager, recently spoke with Ted Augustinos, Partner at Locke Lord LLP, about his thoughts on how organizations should best address emerging trends in cyber and information security. Ted is a member of Locke Lord’s Privacy and Cybersecurity Practice Group, which assists clients in developing and enforcing data privacy and security policies to ensure compliance with the standards and practices of the industries and legal frameworks in which they operate

Read article