When an organization is blind to where its data resides and what is in it, it becomes impossible both to meet preservation obligations and comply with GDPR’s guidelines to protect and delete sensitive data. By understanding the full scope of the data, counsel can begin to assess the legal requirements involved with it.

As technology evolves and security risks rise, lawyers are confronted with an increasing challenge to satisfy their ethical duties of competence and confidentiality, making the issue of securing data and mitigating breaches increasingly severe. This article will explore data breaches in detail, discussing how counsel can respond to these events, and outlining practical ways to implement a tiered approach to securing a company’s crown jewels.