The new Sedona commentary on information governance provides eleven principles for any IG program with three overarching takeaways. A well-organized IG program should be proactive, reasonable, and comprehensive.
read more 
A major goal of the Federal Trade Commission (“FTC”) is to protect consumer privacy. The rise in technology has made personal information of consumers more vulnerable than ever before. Because of this, the FTC has started to bring more data security and privacy cases against big tech companies. Since the U.S. does not have a comprehensive federal privacy law or independent agency solely committed to privacy violations, enforcement falls under the FTC’s purview. For years, many privacy advocates have claimed that the FTC does not issue strong enough penalties against big tech companies that fail to adequately safeguard consumer data. Now that more people are talking about data privacy issues and recent data breaches, we see a trend emerging of the FTC issuing larger fines and calling for stricter privacy standards. Two noteworthy FTC investigations recently made headlines due to the fines involved.
read more After a long silence since guidance was last issued a year ago, there’s now widespread expectation that the Securities and Exchange Commission will get much more specific this year about new cybersecurity disclosures for public companies. Recent actions also signal the commission is paying close attention not just to disclosures, but to weaknesses that create cybersecurity risks at companies.
read more As massive data breaches continue to make headlines, companies of all sizes are focusing their efforts on information security. But before an organization can put security policies and procedures in place, they need a well-crafted information governance framework to properly manage valuable data and minimize risk.
read more