American architect Louis Sullivan, who coined the iconic phrase “form ever follows function,” was flat wrong – at least when it comes to the relationship of what we do and how we capture it with data. The reality is instead
Information Bytes
The law blog for data with people problems
Information Bytes, published by Information Governance Group, focuses on practical aspects of information governance including data retention, data management, defensible disposition, and data security. The blog addresses compliance with regulatory requirements, risk mitigation related to data handling, and strategies for maximizing the value of organizational information. It covers topics such as establishing legally validated records retention schedules, implementing information management policies, data breach response readiness, and aligning information governance initiatives with business objectives. The content also explores the intersection of information governance with litigation discovery and privacy regulations, providing guidance for organizations to manage information cost-effectively while controlling legal and security risks.
Latest from Information Bytes - Page 10
Why don’t data security laws simply tell us what we need to do?
By Peter Sloan
It’s a common complaint – most U.S. laws requiring data security never cough up the specifics of what must be done to comply. Unlike other areas of business regulation, data security requirements seem hopelessly vague:
- Several states’ PII laws require businesses to implement
…
InfoSec Audit’s role in cleaning up ROT
In a previous post I suggested that Information Technology is really in a good position to help identify and clean up ROT (redundant, obsolete, and trivial information). Sometimes, though, IT needs a helping hand to get the attention of those who…
In-house Counsel in the Cybersecurity Crosshairs
By Peter Sloan
While preparing for an upcoming presentation for in-house lawyers on data security, I dusted off the events of three months ago, when Yahoo! Inc. unceremoniously fired its general counsel on March 1st, the very same day it filed its 10-K for fiscal…
How quickly is stolen PII fraudulently used? Faster than you can tweet “covfefe”
By Peter Sloan
… well, not quite that fast. But nine minutes is pretty quick, as FTC researchers recently confirmed.
The FTC’s Office of Technology Research & Investigation (OTech) ran an experiment in April and May, posting made-up personally identifiable information in plain text…
In breach response, who and how are just as important as what and when
By Peter Sloan
Sometimes one must look past the headlines (Target’s $18.5 million deal with the states) to see what’s truly important in effective data breach response.
Last week, in the Experian data breach litigation, the District Court denied plaintiffs’ motion to…
Cry, Baby, Cry
I hope you were not affected by last Friday’s WannaCry ransomware hack. If you were, you are unfortunately part of the biggest on-line extortion scheme seen to date. And it may not be over, as new variants are appearing, so
…
Yipee – Verizon’s 2017 DBIR has arrived!
By Peter Sloan
I always look forward to Verizon’s annual Data Breach Investigations Report. Verizon dropped the 2017 DBIR last week, and for the 10th year in a row it cuts through the confusing landscape of security incidents and data breaches with analysis, alacrity…
America’s great – New Mexico makes 48
By Peter Sloan
Effective June 16, New Mexico will be the 48th state with a PII data breach notification statute. New Mexico joins the vast majority of states, plus the District of Columbia, Puerto Rico, Guam, and the U.S. Virgin Islands, in requiring notice to affected…
Earth Day and data pollution
By Peter Sloan
When Earth Day rolls around each year, I can’t help but think of the picnic scene from Mad Men. After Don Draper chucks his empty beer can into the pond, Betty snaps the blanket, dumping their litter across the grass, before…