Law.com Subscribers SAVE 30%
Call 855-808-4530 or email [email protected] to receive your discount on a new subscription.
Data Mapping: Leave No Data Behind
In the current digital era, businesses are gathering and keeping enormous volumes of data on their clients, staff and operations. Data breaches and cyberattacks are more likely as data volume increases. Corporate legal departments must implement an efficient information governance procedure that incorporates data mapping to reduce these risks. Data mapping is the process of figuring out what information a company gathers, where it is kept and how it moves across the company. Every company's legal department should engage in it since it enables them to comprehend their data landscape and put the necessary security measures in place to safeguard sensitive data. This article examines the importance of data mapping for corporate legal departments and how it fits into a larger strategy.
Familiar Ways That Data Mapping Engages In Your Everyday Matters
We all know that data mapping is the process of identifying and documenting the flow of data through a system or organization. In litigation or regulatory cases, data mapping can help identify and locate relevant data sources, understand the scope of data retention obligations and assess the risks associated with data storage and management practices. Here are some familiar ways that data mapping is involved in litigation and regulatory cases:
- Securities Fraud Investigation. In a securities fraud investigation, data mapping can help identify all the systems and applications that may contain relevant data, such as trading systems, customer databases and email archives. Data mapping can also aid in picking out the individuals with access to this data and the specific elements relevant to the investigation.
- E-Discovery. In e-discovery, data mapping can help identify the locations of electronically stored information and determine the best approach for collecting, processing and reviewing that ESI. This can include mapping the data flow within an organization to find key custodians and data repositories and tracking the data processing and review workflows to ensure that relevant data is identified and produced promptly and efficiently.
- Privacy Compliance. In a privacy compliance audit or investigation, data mapping can help identify the types of personal data that an organization collects, where that data is stored, how it is processed and who has access to it. This can assist organizations in uncovering potential compliance risks and developing strategies for minimizing those risks, such as implementing data minimization and deletion policies.
- Intellectual Property Litigation. In intellectual property litigation, data mapping can help identify the locations of key documents, such as patents, trademarks and copyrights, as well as the systems and applications used to create, store and manage those documents. This can aid in determining potential sources of infringement or misappropriation and potential weaknesses in an organization's intellectual property management practices.
- Anti-Money Laundering Compliance. In an anti-money laundering investigation, data mapping can help identify the locations of financial transaction data, such as bank records and wire transfer logs, as well as the systems and applications used to manage that data. This can allow investigators to trace the flow of funds through an organization and establish potential money laundering activities.
Data mapping has become increasingly important in recent years as more companies collect and process substantial amounts of personal data. Failure to properly map and protect data can lead to legal repercussions, including fines, penalties and legal liability.
The DOJ's Corporate Enforcement Policy: One Year Later
The DOJ's Criminal Division issued three declinations since the issuance of the revised CEP a year ago. Review of these cases gives insight into DOJ's implementation of the new policy in practice.
The DOJ's New Parameters for Evaluating Corporate Compliance Programs
The parameters set forth in the DOJ's memorandum have implications not only for the government's evaluation of compliance programs in the context of criminal charging decisions, but also for how defense counsel structure their conference-room advocacy seeking declinations or lesser sanctions in both criminal and civil investigations.
Use of Deferred Prosecution Agreements In White Collar Investigations
This article discusses the practical and policy reasons for the use of DPAs and NPAs in white-collar criminal investigations, and considers the NDAA's new reporting provision and its relationship with other efforts to enhance transparency in DOJ decision-making.
Bankruptcy Sales: Finding a Diamond In the Rough
There is no efficient market for the sale of bankruptcy assets. Inefficient markets yield a transactional drag, potentially dampening the ability of debtors and trustees to maximize value for creditors. This article identifies ways in which investors may more easily discover bankruptcy asset sales.
A Lawyer's System for Active Reading
Active reading comprises many daily tasks lawyers engage in, including highlighting, annotating, note taking, comparing and searching texts. It demands more than flipping or turning pages.