This article covers a newly passed Florida law that requires health care providers and digital health technology platforms using certified electronic health record technology (CEHRT) to ensure that all patient information is physically maintained within the United States or Canada.
In development or update of a records program it may appear that once a company has its policies and processes, roadmap, tools, and technology in place, some may believe they are done. However, here is still a critical task remaining: employee behavior change management.
Organization’s records retention schedules need to be synchronized with assurance current and emerging privacy laws . Records retention laws and regulations may require companies to retain records for a certain number of years, driven by literally thousands of record retention regulations. These requirements may override consumer deletion requests of their personal information.
Deleting emails and files is a type of initiative that looks easy at the outset but become difficult. Emails and files are retained, and month after month, can quickly year after year they accumulate creating digital layers called information horizons. These information horizons contain a little bit of everything: records, non-records, copies containing high-value value information, personal information, intellectual property, and even documents subject to legal hold.
It can be costly to hold on to information that is obsolete, expired, either legal, regulatory, and not needed for or business reasons. An organization must determine what needs to be saved (meaning, it can identify what can be disposed). Policies can be developed that include both the business justification and process for deleting electronic documents, and establish consistent, repeatable, defensible processes that allow for the routine deletion of data not under a legal hold.
The ACC Records Management Program Maturity model provides a detailed maturity model for all aspects of an organization’s records program.
It seeks to gauge program effectiveness across a variety of program elements, taking a “big picture” view to increase program value.
This Privacy Capability Maturity Model provides a detailed maturity model for all aspects of an organization’s privacy program, including its use of Artificial Intelligence (AI) and Machine Learning (ML) using personal information.
It seeks to gauge program capability across a variety of program elements, taking a “big picture” view on an organization’s readiness to comply with these requirements.
In order to successfully transition to Office 365, in-house lawyers at corporations large and small must plan ahead. This article will address the top ten things to consider when rolling out Microsoft Office 365.
Litigation is a complicated game of claims and defenses, requiring the court’s attention on the merits. Requesting parties frequently attempt to distract the court with claims unrelated to the merits in an effort to take their eyes off the ball. Parties are seeking discovery of unrelated, overbroad information that courts have repeatedly found to be outside the bounds of what is permitted by the Federal Rules of Civil Procedure. Be prepared to blow the whistle.
A free service to in-house counsel developed by ACC, the ACC Data Steward Program (DSP) offers a standardized SaaS-based framework for assessing law firms’ data security protocols and scoring their ability to protect sensitive client information. The DSP provides a centralized repository to gather and validate the data security protocols of all outside counsel hired by a legal department. An optional ACC Accreditation of individual law firms is available.