The Association of Corporate Counsel (ACC) and a group of its members have developed this<br />Model Information Protection and Security Controls for Outside Counsel Possessing Company<br />Confidential Information (“Model Controls”) to help in-house counsel as they set expectations<br />with their outside vendors, including outside counsel, regarding the types of data security controls<br />these vendors should employ to protect their company ‘s confidential information. The Model<br />Controls provide a list of baseline security measures and controls some legal departments may<br />consider requiring from outside vendors. It is ACC’s hope that the Model Controls offer in-house<br />counsel a streamlined and consistent approach to setting expectations with respect to the data<br />security practices of their outside vendors.