Law.com Subscribers SAVE 30%

Call 855-808-4530 or email [email protected] to receive your discount on a new subscription.

Five Steps for Managing the Risks Associated with Sensitive Data

By Jonathan M. Cohen and Elise Dieterich
May 25, 2010

In the “Information Age,” data has become a form of currency, and the types and quantity of data that businesses collect, store, buy, sell, and manage continue to expand. Sensitive, personally identifiable information (“PII”) such as names, Social Security Numbers, account numbers, dates of birth, and physical and virtual addresses are collected and used for virtually every corporate function: human resources, marketing, sales, customer support, technical support, product development, investor relations, regulatory compliance ' the list goes on. Companies also handle sensitive data related to intellectual property and trade secrets that must be protected.

Industries like banking and health care that are subject to specific privacy and data security laws have long been sensitive to the risks and potential liabilities associated with handling PII. But, many other businesses are just beginning to become aware of the responsibilities and exposures that come with handling employees,' customers,' and other people's data. The trend toward cloud computing, use of third-party application service providers, and outsourcing functions that can include payroll, benefits, marketing and more, multiply the potential vulnerabilities, and up the ante when it comes to managing data-related risk.

This premium content is locked for LJN Newsletters subscribers only

  • Stay current on the latest information, rulings, regulations, and trends
  • Includes practical, must-have information on copyrights, royalties, AI, and more
  • Tap into expert guidance from top entertainment lawyers and experts

For enterprise-wide or corporate acess, please contact Customer Service at [email protected] or 877-256-2473

Read These Next
The DOJ's Corporate Enforcement Policy: One Year Later Image

The DOJ's Criminal Division issued three declinations since the issuance of the revised CEP a year ago. Review of these cases gives insight into DOJ's implementation of the new policy in practice.

The DOJ's New Parameters for Evaluating Corporate Compliance Programs Image

The parameters set forth in the DOJ's memorandum have implications not only for the government's evaluation of compliance programs in the context of criminal charging decisions, but also for how defense counsel structure their conference-room advocacy seeking declinations or lesser sanctions in both criminal and civil investigations.

Use of Deferred Prosecution Agreements In White Collar Investigations Image

This article discusses the practical and policy reasons for the use of DPAs and NPAs in white-collar criminal investigations, and considers the NDAA's new reporting provision and its relationship with other efforts to enhance transparency in DOJ decision-making.

Bankruptcy Sales: Finding a Diamond In the Rough Image

There is no efficient market for the sale of bankruptcy assets. Inefficient markets yield a transactional drag, potentially dampening the ability of debtors and trustees to maximize value for creditors. This article identifies ways in which investors may more easily discover bankruptcy asset sales.

Compliance Officers: Recent Regulatory Guidance and Enforcement Actions and Mitigating the Risk of Personal Liability Image

This article explores legal developments over the past year that may impact compliance officer personal liability.