Photo of Jim Merrifield

Jim Merrifield is Robinson+Cole's Records & Information Governance Manager, a member of the Data Privacy + Cybersecurity Team, and a non-attorney contributor to the Data Privacy + Security Insider blog. He has spent more than a decade helping organizations of all sizes, including law firms and  Fortune 500 companies, develop and implement practical information governance strategies, policies, and best practices. He has authored numerous publications and frequently speaks on information governance and data privacy issues. Jim holds a bachelor degree in Legal Studies from Quinnipiac University and is a certified information governance professional (IGP).

Now more than ever before there is an increased demand for employees to share and collaborate on documents with people inside and outside of their respective organizations. For this reason, organizations of all shapes and sizes are turning to enterprise file sync and share (EFSS) solutions to provide secure cloud-based file sharing.

A recent survey

A recent Advice from Counsel study sponsored by FTI Technology, entitled “The State of Information Governance in Corporations,” found data security to be the top driver for information governance initiatives. The purpose of the study was to better understand the health and success of information governance programs within corporations. The respondents included approximately 25 in-house

In an information governance model, there are business-focused components and aspects, and there are technology-focused components and aspects. Information Governance isn’t just technology driven, nor is it solely business driven. It is a partnership between business and technology. Both must be present in the program.

The Business Side

Diving into the business side, the first

Many organizations are considering an update to their existing SharePoint environment in 2016. This is largely due to new functionalities being offered with SharePoint 2016, especially if the organization is still running SharePoint 2010 or later. With that said, a well thought out migration strategy is key to the success of this project.

Let’s consider

The purpose of an information governance program is to provide insight into information that is the most valuable to the organization, while minimizing associated risks and costs. Until recently, organizations focused less on the latter and heavily on gaining insight into the most valuable information. The reason for this change is largely due to the

The GDPR (General Data Protection Regulation) outlines a series of amendments to the data protection and data privacy requirements applicable to all companies with European customers, regardless of where the company’s headquarters reside.

Some of the proposed amendments include:

  • penalties of up to €100 million, or 2.5% of annual worldwide turnover, whichever is greater
  • increased

There is no secret sauce to achieving information governance nirvana. The reality is someone must take ownership of an organization’s information governance program. The industry as a whole has been discussing that organizations appoint a chief information governance officer (CIGO) or its equivalent, to lead information governance efforts. The title is not important—the skill set

An annual audit conducted by the U.S. Government Accountability Office of the Fiscal Service Bureau, identified (9) nine new information security weaknesses in the U.S. Treasury Department’s information systems that are used to manage sensitive data in connection with federal debt.

It was further reported that although these weaknesses aren’t considered to be significant, the