This article appeared in The Corporate Counselor, an ALM publication covering the latest changes in business regulatory climates. For Corporate Counsel, In-House Counsel, Managing Partners. Visit the website to learn more.
The struggle is real. With the EU’s General Data Protection Regulation (GDPR) set to take effect in May 2018, the serious implications for corporate legal counsel and e-discovery teams are difficult to deny. Among other aspects of its broad reach, the GDPR extends compliance requirements to both data controllers and “processors,” a distinction that certainly includes e-discovery data processing in the context of litigation and investigations. Complicating matters further, the Regulation affords data subjects the “right to be forgotten,” a key aspect that affords individuals that right to request erasure or removal of data from systems and databases, presenting potential new challenges for the collection and hold of data in connection with U.S. discovery requirements.
In addition, the GDPR imposes certain organizational requirements, accountability measures, breach notification requirements and processing system assessments, not to mention specific limitations around the transfer of personal data to third party countries not deemed to provide adequate personal data protections (here’s looking at you, Uncle Sam). And all of this is backed by some serious teeth: a tiered financial penalty regime stretching up to 4% of annual global revenue turnover. That can make for some astronomical numbers, and while it’s unlikely that such steep fines will be commonplace, it is clear that there is a concentrated effort on the part of regulators to place a level of seriousness around data protection and privacy compliance that rivals anti-trust considerations. The purported penalty scheme and steep financial consequence of non-compliance to the GDPR is, without question, an effort to get companies of all stripes to stand up and take notice.
To view this content, please continue to Lexis Advance®.
Not a Lexis Advance® Subscriber? Subscribe Now
LexisNexis® is now the exclusive third party online distributor of the broad collection of current and archived versions of ALM's legal news publications. LexisNexis® customers will be able to access and use ALM's content by subscribing to the LexisNexis® services via Lexis Advance®. This includes content from the National Law Journal®, The American Lawyer®, Law Technology News®, The New York Law Journal® and Corporate Counsel®, as well as ALM's other newspapers, directories, legal treatises, published and unpublished court opinions, and other sources of legal information.
ALM's content plays a significant role in your work and research, and now through this alliance LexisNexis® will bring you access to an even more comprehensive collection of legal content.
For questions call 1-877-256-2472 or contact us at firstname.lastname@example.org