This article appeared in The Corporate Counselor, an ALM publication covering the latest changes in business regulatory climates. For Corporate Counsel, In-House Counsel, Managing Partners. Visit the website to learn more.
The struggle is real. With the EU’s General Data Protection Regulation (GDPR) set to take effect in May 2018, the serious implications for corporate legal counsel and e-discovery teams are difficult to deny. Among other aspects of its broad reach, the GDPR extends compliance requirements to both data controllers and “processors,” a distinction that certainly includes e-discovery data processing in the context of litigation and investigations. Complicating matters further, the Regulation affords data subjects the “right to be forgotten,” a key aspect that affords individuals that right to request erasure or removal of data from systems and databases, presenting potential new challenges for the collection and hold of data in connection with U.S. discovery requirements.
