Data Privacy

With sensitive patient information at risk, the demand for robust healthcare data security measures has always been a priority of healthcare organizations. A distinct challenge arises in effectively adapting security measures to current technologies and ever-changing cyber threats. This is no small feat, given the increasing sophistication of cyber threats. The risks are manifold, ranging from unauthorized access to sensitive h

Data is being created and stored at rapid rate. By 2025, the International Data Corporation (“IDC”) estimates worldwide data will reach 181 zettabytes, representing a compound annual growth rate of 23% over the 2021-2025 period. The IDC also estimates a 19.2% CAGR in worldwide storage capacity over the same period, growing to above 16ZB. For organizations, such dramatic growth of stored

Last month, Apple announced that in their upcoming iOS 16 release, iMessage will include the ability to unsend (or “recall”) messages, as well as edit messages after sending. Naturally, our first reaction to this announcement was to ask ourselves: “How will these new features impact iMessage discovery?” This question was followed only by a further waterfall of questions: “Could these features be used to hide evidence? Would unsent or original messages

Data never stops accumulating, which means that proactive measures are required to stay on top of data growth, even if you’ve just completed a ROT data cleanup. Investing in enterprise governance technology can supercharge your organization’s ability to preventing future ROT data accumulation. Information Governance platforms that empower organizations to manage data in place are especially well suited for this challenge. In-place data governance refers to analyzing, classifying, and governin

In last week’s article, we discussed some of the potential risks in failing to proactively manage ROT and over-retained data in a world where data is growing at an exponential rate. As promised, in this week’s article, we’ll explore some of the ways to identify, manage and delete ROT data. If managing ROT data manually without the help of software were easy and time efficient, there would

Implementing an information governance tool to help manage sensitive data can sometimes feel like an overwhelming task. With regulations varying across jurisdictions and a bevy of new laws pending, it’s easy to find yourself in a state of decision paralysis, wondering: “where do I possibly begin?” Good news, this post was written for you! In this blog, we will propose that to begin to manage sensitive data, you should first classify data sensitivity into broad, widely applicable categories based

What is the CPRA? The California Privacy Rights Act (“CPRA”) is a new state-wide data privacy bill, also known as Proposition 24, passed into law on November 3, 2020. The CPRA significantly amends and expands the California Consumer Privacy Act (“CCPA”), which enforces an array of consumer privacy rights and business obligations regarding the collection and sale of personal information.  In this article, we will

GDPR after Brexit The General Data Protection Regulation has been around for years, and you likely cannot make it through a news cycle without hearing the term “Brexit” yet, questions still abound about what they mean together. In case you missed it, the trade and cooperation agreement of 12/24/2020 outlined how data transfers will be treated going forward between the UK and the European Economic

Executive Summary Do not believe that you need to spend enormous amounts of money on technology to achieve compliance  Acknowledge that risk analysis is key to determine where investments are truly needed  Metric tracking from the start is the most essential data for better risk analysis and process improvement  Understand the rights you are afforded as a company to defend against weaponized requests  Consider every DSAR request fulfillment as an audit of your response stra

Tom Preece, Rational’s Business Development Manager, recently spoke with Kurt Wimmer about his thoughts on emerging data privacy and security trends and how organizations should begin to address these risks. Kurt Wimmer is the U.S. chair of Covington & Burling’s Data Privacy and Cybersecurity practice and is the immediate past chair of the Privacy and Information Security Committee of the American Bar Association’s Antitrust Section. Tom Preece: You have written in the past about h

Tom Preece, Rational’s Business Development Manager, recently spoke with Ted Augustinos, Partner at Locke Lord LLP, about his thoughts on how organizations should best address emerging trends in cyber and information security. Ted is a member of Locke Lord’s Privacy and Cybersecurity Practice Group, which assists clients in developing and enforcing data privacy and security policies to ensure compliance with the standards and practices of the industries and legal frameworks in which they operate