MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

22

Transcript of MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

Page 1: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.
Page 2: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE

OF LAW

Page 3: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

You can submit them by:

• Texting 66344 and your question to 22333

• Ask questions or make comments verbally by using the microphones provided in the session room

Questions for the Panelists?

Page 4: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

What is the Virtual Practice of Law?

Questions for the panelists? Text 66344 and your question to 22333

Page 5: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

Pros of Virtual Law Practice

Questions for the panelists? Text 66344 and your question to 22333

Page 6: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

FLEXIBILITY

Questions for the panelists? Text 66344 and your question to 22333

Page 7: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

ECONOMIC BENEFITS

Questions for the panelists? Text 66344 and your question to 22333

Page 8: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

Questions for the panelists? Text 66344 and your question to 22333

Page 9: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

Challenges of Virtual Law Practice`

Questions for the panelists? Text 66344 and your question to 22333

Page 10: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

Security & Backups

A. Who has access to law office data? 

B. Find and review confidentiality, privacy policy and nondisclosure statements. 

C. Law office data should remain encrypted, and should only be decrypted with the permission of the lawyer/law firm.

D. Understand how backups, maintenance and updates to the service affect the security of law office data.

1. Does the provider conduct regular security audits?

2. How often do they backup data?

3. Is there any downtime for maintenance, or for upgrades to service?

Questions for the panelists? Text 66344 and your question to 22333

Page 11: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.
Page 12: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

FTC Safeguard Rule Under GLBA (16.CFR §314)

OBJECTIVES • Insure the security & confidentiality of customer

information• Protect against anticipated threats or hazards to

the security or integrity of such information; and• Protect against unauthorized access to or use of

such information that could result in substantial harm or inconvenience to any customer

•aa complete security program (16 CFR § 314.4)Questions for the panelists? Text 66344 and your question to 22333

Page 13: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

Financial Privacy Rule

• Applicable to Financial Institutions under GLBA

Questions for the panelists? Text 66344 and your question to 22333

Page 14: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

Duties of Financial Institutions

Strict duty of confidentiality with consumer’s non-public personal information

Questions for the panelists? Text 66344 and your question to 22333

Page 15: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

What is non-public consumer information?

Personally Identifiable Financial Information Any information a consumer gives to a

financial institution Information about the consumer’s

transaction Or information a financial institution

otherwise obtains from a customer

Questions for the panelists? Text 66344 and your question to 22333

Page 16: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

Exceptions to Duty of Confidentiality & Customer’s Right to Restrict Disclosure (15 USC §6802(e)(8)

Questions for the panelists? Text 66344 and your question to 22333

Page 17: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

Exceptions

• To comply with federal, state or local laws, rules or other applicable legal requirements; or

• To comply with a properly authorized civil, criminal or regulatory investigation or subpoena or summons by federal, state or local authorities; or

• To respond to judicial process or government regulatory authorities having jurisdiction over the financial institution for examination, compliance or other purposes as authorized by law

Questions for the panelists? Text 66344 and your question to 22333

Page 18: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

LOCAL COUNSEL

Questions for the panelists? Text 66344 and your question to 22333

Page 19: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

LOCAL COUNSEL

Questions for the panelists? Text 66344 and your question to 22333

Page 20: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

THE RELEVANT ETHICAL RULES

Questions for the panelists? Text 66344 and your question to 22333

Page 21: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

The Relevant Ethical Rules (ABA Model Rules)

Rule 1.1 Competency

Rule 5.5Unauthorized Practice of Law

Rule 1Confidentiality of Information

Rule 1.4 Communication

Rule 1.7 Conflict of Interest

GLBA Data privacy and security

Rule 3.3 Candor Toward the Tribunal

Questions for the panelists? Text 66344 and your question to 22333

Page 22: MAINTAINING PRIVACY & DATA SECURITY IN THE VIRTUAL PRACTICE OF LAW.

Relevant Ethical Rules

Data privacy

and security for PII

State

BAR

Lawyers

Questions for the panelists? Text 66344 and your question to 22333