Blogs

Are law firms ready to tackle data privacy?

By NJSBA Staff posted 07-10-2020 05:13 PM

  

As society becomes more digital – and cyberattacks become more sophisticated – lawyers must have the technology to protect their information

Editor's note: The following is excerpted from a longer article in the June issue of New Jersey Lawyer, a publication of the New Jersey State Bar Association (NJSBA). Members can read the complete article and others in the latest issue of New Jersey Lawyer under the members section tab at njsba.com.

By Maryam Meseha

The extensive and ongoing integration of technology in the workplace requires a contemporary understanding of data privacy and the laws that govern digitally stored information. As e-commerce and information technology sectors continue to expand, cybercrimes continue to increase.[1]

According to the American Bar Association’s 2019 Legal Technology Survey, although 60% of all firms budget for IT, 60% of solo practitioners stated that they did not budget for it.[2] Comparatively, only 44% of firms with two to nine attorneys stated that they did not budget for technology.

Since IT is an essential part of running any organization in the 21st century, companies must be vigilant in protecting its business and client information against data breaches.

Companies can take substantial strides toward improving their cybersecurity and insulating themselves against potential data breaches. The first step is to make sure that the security system complies with any applicable state or federal laws. After ensuring compliance with government regulations, companies should properly budget for technology in company accounts.

Proper budgeting for technology shows company awareness of cybercrime and the growing threat of data breaches. This budgeting should not only focus on the use and maintenance of secure IT systems, but also proper training for employees. Properly trained employees will be able to identify potential scams which could provide hackers with access to company data. 

Additionally, companies should subscribe to organizations, such as the New Jersey Cyber Security & Communications Integration Cell, which publish memorandums and notices concerning cyberattacks and information security in New Jersey. Many of these organizations provide for best practices in data security, and also suggest systems which companies may want to purchase. Companies who implement these suggested courses of action, will be well on their way to a secure data information system.

 

[1] A Glance at the United States Cyber Security Laws, Hardeep Singh (Jan. 7, 2016), appknox.com/blog/united-states-cyber-security-laws

[2] Techreport 2019: Budgeting & Planning, Law Technology Today (Nov. 20, 2019), lawtechnologytoday.org/2019/11/techreport-2019-budgeting-planning/

Permalink