16 key issues counsel should consider to mitigate vendor-related data breaches
Taking the time to address data breach concerns before a contract is signed can pay big dividends should a breach involving the vendor take place.
December 05, 2013 at 03:00 AM
4 minute read
The original version of this story was published on Law.com
A future data breach may not be the most top of mind issue for entities engaged in contract negotiations with vendors who, in the course of their work for the entity, will have access to or possession of the entity's confidential data. But taking the time to address data breach concerns before the contract is signed, when the entity may have the most leverage, can pay big dividends should a breach involving the vendor take place. The following are some of the key issues entities generally should consider to protect themselves before and at the time of contracting with vendors. Industry-specific laws, regulations and standards also should be carefully considered.
Pre-contracting due diligence: Entities should conduct thorough technical compliance-focused due diligence to access a prospective vendor's security infrastructure and environment. Security issues can be exposed up front and vendors that are not up to the job can be disqualified. Note that healthcare providers may need to enter into Business Associate Agreements with prospective vendors during this stage.
Data ownership: The contract should address who owns the data, particularly if the data is to be stored in the cloud.
NOT FOR REPRINT
© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
Trending Stories
- 1The Law Firm Disrupted: For Big Law Names, Shorter is Sweeter
- 2Wine, Dine and Grind (Through the Weekend): Summer Associates Thirst For Experience in 'Real Matters'
- 3The 'Biden Effect' on Senior Attorneys: Should I Stay or Should I Go?
- 4'That's Disappointing': Only 11% of MDL Appointments Went to Attorneys of Color in 2023
- 5'You Are Not Alone': 120 Sex Assault Victims Plan to Sue Sean 'Diddy' Combs
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250