The Association of Corporate Counsel (ACC) and a group of its members have developed this Model Information Protection and Security Controls for Outside Counsel Possessing Company Confidential Information (“Model Controls”) to help in-house counsel as they set expectations with their outside vendors, including outside counsel, regarding the types of data security controls these vendors should employ to protect their company ‘s confidential information. The Model Controls provide a list of baseline security measures and controls some legal departments may consider requiring from outside vendors. It is ACC’s hope that the Model Controls offer in-house counsel a streamlined and consistent approach to setting expectations with respect to the data security practices of their outside vendors.