A comprehensive federal data privacy law in the United States has never been closer to reality. Even with bipartisan and bicameral support, it still has many obstacles to overcome to get through Congress. The most recent hurdle was making it out of the House Committee on Energy and Commerce, which sent the bill to the…
Tell us about your role at Zasio. As a Senior Consultant at Zasio, I have the privilege of working with clients to improve their IG/RIM programs. My most requested role involves simplifying or creating records retention schedules and other RIM policies/procedures. I’m also lucky to co-lead two amazingly hard-working and talented teams at Zasio: the…
Privacy may very well be the fastest-growing area of law so far in the 21st century. While the US, at the federal level, has resisted a broad privacy law similar to the GDPR, momentum is steadily gaining for privacy legislation at the state level. This blog explores US privacy law’s recent developments from a records…
Whistleblower Directive Quick Overview The EU recently approved a new Whistleblower Directive promoting common minimum standards designed to enhance protections for Whistleblowers and prevent retaliation for participation in whistleblowing activities. The directive allows for reporting of breaches of law both internally within companies, and externally, directly to national and EU authorities, and requires the creation…
Many Records and Information Management (RIM) professionals hear the question, “Why is RIM necessary?” My short answer is that effective RIM saves your company money, makes it more efficient, and reduces its risk. I want to expand on that answer by listing some of the ways a good RIM program can work for you. Disposition…
Developing a Disaster Plan Do you have a records management disaster plan? Headlines about natural disasters provide a stark reminder that we can’t control our environment. However, if we plan for disasters and assess risks, we can help ensure business continuity if disaster strikes. To plan for disaster, analyze the different types of potential disasters…
Records managers often overlook laws that regulate record formats. Most companies store the bulk of their records electronically—or they’re moving in that direction. This makes it important to consider legal requirements about records formats. Permissive Format Regulations The good news is that most format regulations allow for electronic recordkeeping if you meet certain conditions. In the…
All enterprises, whether they be commercial, governmental, charitable, or any other structure, are required to follow information management regulations in some way; there are even laws regulating the president of the United States.[1] This article discusses several regulatory requirements that impact enterprises during information creation, custodianship, archival and disposition cycles. Good practice requires the identification…
ROT stands for Redundant, Obsolete, and/or Trivial information and includes all information NOT being stored for a valid business, legal or common practice purpose. It is duplicative of official records, past its useful life, and/or information that does not meet the standard for an official record. Also, it’s important to remember that ROT consists of…
Introduction The proposed Privacy Shield agreement between the US and EU seeks to streamline EU data protection compliance for commercial exchanges requiring the transfer of personal data from the EU to the US. If approved, it would replace the Safe Harbor agreement which was deemed inadequate in assuring the protection of personal data by the…