“Companies that profit from personal information have an extra responsibility to protect and secure that data,” said FTC Chairman Joe Simons. “Equifax failed to take basic steps that may have prevented the breach that affected approximately 147 million consumers. This settlement requires that the company take steps to improve its data security going forward, and will ensure that consumers harmed by this breach can receive help protecting themselves from identity theft and fraud.”
“The Antitrust Division is committed to rewarding corporate efforts to invest in and instill a culture of compliance,” said Assistant Attorney General Delrahim. “The Division’s Leniency Policy has long provided the ultimate credit for effective antitrust compliance programs. Beyond leniency, recently we have credited prospective compliance efforts at sentencing. Crediting compliance at charging is the next step in our continued efforts to deter antitrust violations and reward good corporate citizenship.”
Much of the discussion about cloud services remains focused on the needs of less-mature organizations and on technical rather than business considerations. Debate concentrates on whether to move to the cloud, which workloads are best to “lift and shift” from a cost, security and compliance perspective or how to avoid supplier lock-in, currently one of the biggest concerns when moving to the cloud.
“This is a tremendous opportunity for our employees and our clients,” stated Oleh Hrycko, H&A eDiscovery President. “Arbor Ridge Partners’ experience and knowledge of the Litigation Support and eDiscovery industry was invaluable. They understood our particular goals and objectives and provided options that were spot on and with exceptional guidance, communication, and counsel.”
EY and Thomson Reuters today announced an agreement for the acquisition of the Thomson Reuters Pangea3 Legal Managed Services (LMS) business by various firms in the EY network. The acquisition will greatly enhance EY technology-enabled legal managed services in the three core areas of contract lifecycle management, regulatory risk and compliance, and investigations and litigation.
Epiq announced today that it has acquired H&A eDiscovery, a leading Canadian eDiscovery and litigation support firm. H&A eDiscovery will immediately begin operating under the Epiq brand.
The California Consumer Privacy Act (CCPA), a broad-based law protecting information that identifies California residents, will take effect in 2020. The law includes detailed disclosure requirements, provides individuals with extensive rights to control how their personal information is used, imposes statutory fines and creates a private right of action. It is expected to dramatically alter the way U.S.-based companies process data.
Contextual analysis technology is still in early adoption stages among many Fortune 500 companies. With this advanced technology, companies have the ability to pinpoint behavioral red flags and be empowered to more effectively identify, manage, and mitigate “bad behavior” before it escalates.
It is important that all covered entities, business associates, and subcontractors dealing with PHI ensure that eDiscovery providers supporting them adhere to HIPAA and HITECH Act compliance requirements.
The California Consumer Privacy Act of 2018 creates sweeping new requirements concerning the collection, maintenance, and tracking of information for both employees or customers who are residents of California. Companies with employees or customers in California need to take stock of the information they are processing that could qualify as “personal information” for California residents, and they need to begin establishing mechanisms for compliance before the end of 2019.