Managing privacy risks in e-discovery data collection and processing: understanding data privacy regulations for personally identifiable information
E-discovery is still a weak point for companies trying to manage the personally identifiable information (PII) of employees and customers. Although most companies have tightened the controls around privacy compliance, electronic discovery remains vulnerable.
At a glance
- The stakes are high: US regulators have been slapping huge fines on big companies for failing to properly protect PII.
- Whether for litigation or investigation, PII is often collected and processed by numerous parties, making it subject to multiple privacy regulations both domestically and internationally.
- Writing for Metropolitan Corporate Counsel, Candice Lang explains why counsel and risk managers need to be aware of the regulations governing the data they collect for litigation holds or investigations.