April 2, 2019

How to handle dark data compliance risk at your company

Lisa Hawke
Contributor

Lisa Hawke is VP of Security and Compliance at Everlaw, and Vice Chair of Women in Security and Privacy.

Slack and other consumer-grade productivity tools have been taking off in workplaces large and small — and data governance hasn’t caught up.

Whether it’s litigation, compliance with regulations like GDPR or concerns about data breaches, legal teams need to account for new types of employee communication. And that’s hard when work is happening across the latest messaging apps and SaaS products, which make data searchability and accessibility more complex.

Here’s a quick look at the problem, followed by our suggestions for best practices at your company.

Problems

The increasing frequency of reported data breaches and expanding jurisdiction of new privacy laws are prompting conversations about dark data and risks at companies of all sizes, even small startups. Data risk discussions necessarily include the risk of a data breach, as well as preservation of data. Just two weeks ago it was reported that Jared Kushner used WhatsApp for official communications and screenshots of those messages for preservation, which commentators say complies with record keeping laws but raises questions about potential admissibility as evidence.

Powered by WPeMatico

Need practical help?

Start with the problem your technology is causing.

404-585-6253

Start service

Choose the right service path

Your selected time is your in-store appointment

Complete the RepairShopr booking form after choosing a time. The appointment and contact details are saved as a RepairShopr Lead so the team can find the visit when you arrive and begin customer-account and ticket entry faster.

Choose an In-Store Appointment Time

Current limitation: the hosted booking form records the selected time and contact information, but it does not currently ask for device or issue details. Please have that information ready at check-in.