HOW SHOULD WE PRACTICE IN THE CLOUD? UNDERSTANDING PRIVACY & CONFIDENTIALITY CONCERNS

OCTOBER 1, 2015CATHOLIC UNIVERSITY OF AMERICASPONSORED BY THE JOURNAL OF LAW & TECHNOLOGY ANTIGONE PEYTON, ESQ.CLOUDIGY LAW PLLC

Why cloud computing?efficient use of resourceson demand, self-servicebroad network accessresource poolingrapid elasticitymeasured serviceNIST DEFINITION OF CLOUD COMPUTING,

HTTP://CL.OUD.IM/1LSAQQW

Many options….practice management systemsbilling and invoicing mobile apps to support practicelegal research databasesemail and spam filtersdocument management systems

Big ?s & concernsan inevitable mix of personal and business informationprivacyinadequate or inappropriate security measuresintellectual property losswho’s responsible? data leakschoking the Internet

Ethics & the cloudABA Model Rule 1.1, Competence (cmnt. 8)State ethics opinions on use of cloud computing, http://cl.oud.im/1OJjy6LNSA snooping on law firm communicationssophisticated hackers or an inside jobABA Model Rule 1.6, ConfidentialityABA Model Rule 1.15, Safekeeping property

Privacy Implications

The privacy bargain

Convenience of technology v. privacy concernsSensitivity of informationAnonymity of informationPhysical location of the dataRegulation v. marketplace

Consumer culturePrivacy bargain: when consumers careConsentDisclosureExplanations of data useBrokers v. corporate use

U.S.: health, finances, and kids

Health Insurance Portability & Accountability Act (HIPAA)

Health Information Technology for Clinical Health Act (HITECH)

Gramm-Leach-Bliley Act (financial data)

Children’s Online Privacy Protection Act (COPPA)

USA Patriot Act

Fair Credit Reporting Act (FCRA)

Computer Fraud and Abuse Act (CFAA)

Stored Communications Act & Electronic Communications Privacy Act

Confidentiality in the Cloud

Protecting sensitive datareview service & product providers’ TOS and privacy policiesprotecting the office copier hard drivenetwork protectionssecurity on mobile devices detecting viruses, malware, and spyware

Jurisdiction in the cloudLocation of data impacts applicable lawsJurisdictional reach changingMultiple applicable legal regimes

Legal practice todaychanges to business model, new best practicesCLE & team training includes technical competence componentclients demand competent counselsecurity audits & cybersecurity insurance

Questions?

Antigone Peyton, Esq.Founder & CEOCloudigy Law PLLCTwitter: @AntigonePeytonLinkedIn: http://cl.oud.im/1lS46sp

CONTACT INFORMATION: