Best Practices to Maintain Confidentiality and Privilege Over Videoconference
Here are some best practices to ensure that trade secrets or privileged information discussed via videoconference remains protected.
May 08, 2020 at 03:15 PM
6 minute read
In the new work-from-home world, videoconferencing is rapidly gaining in popularity. For example, within the first two weeks, daily usage of Zoom Videoconferencing Communication, Inc.'s software reportedly grew by over 300%. Emily Barry, MarketWatch (Mar. 30, 2020). Corporate and non-corporate Americans alike now routinely host "Zoom Meetings" and even "Zoom Cocktail Parties." And, were there any doubt that many are still on the steep learning curve of ubiquitous conference-call etiquette, one need only look to a recent SNL skit for confirmation. Or at the recent headline-making story about a Good Morning America reporter who broadcast from home—without pants.
For better or worse, while videoconferences replicate many qualities of face-to-face interactions, they also have key differences: When attending a live meeting, it is easy to know and control who is present, who hears the discussion, whether the meeting is recorded, what written materials are distributed, and whether anyone takes notes. By contrast, videoconferences are mediated through complicated technology with hidden settings and rely on cameras allowing only a partial view of participants. For casual conversations, this may be unproblematic. But it has potentially huge implications for trade secrets and privileged communications.
Trade secrets and attorney-client privileged communications both require careful control over their audience. A trade secret's owner must take reasonable steps to protect its confidentiality—which typically involves limiting the number of people who may access it and controlling what recipients do with it—or risk losing protection. See, e.g., Brain Injury Ass'n of California v. Yari, No. CV 19-5912-MWF (JCX), 2019 WL 4544419, at *4 (C.D. Cal. Aug. 9, 2019). And privileged information may only be shared with recipients who share a privileged relationship or that protection is lost. See, e.g., Cal. Evid. Code. §952. For corporations, the persons who share a privileged relationship are generally the corporation's lawyers plus officers, directors, managers, and personnel involved in the privileged matter in the scope of their employment. See D. I. Chadbourne v. Superior Court of City & Cty. of San Francisco, 60 Cal. 2d 723, 736–37 (1964).
Thus, to maintain trade secret or privilege protection, a company must carefully control the audience that receives protected information. Videoconferences complicate this in some obvious ways: They are accessed via online invites that can often be forwarded, participants can take written notes without the organizer's knowledge, and participants may join from environments that are not private (including spaces within others' earshot). Videoconferences have other, less obvious pitfalls: Meetings may be hacked by non-invitees who guess the meeting number (e.g., "Zoombombing"), videoconference platforms may automatically record or transcribe meetings, videoconference platforms may require participants to opt in to security features like private meeting spaces and encryption, and participants may be able to use other devices or screen-capture technologies to record aspects of the meeting without the host's knowledge. This creates potential for privacy breaches due to intentional misdeeds and unintentional mistakes even from social videoconferences, made even more possible by the fact that many work-from-home spaces double as a dining or living room.
Below are some best practices to ensure trade secret or privileged information discussed via videoconference maintains its protection:
- Investigate each videoconference platform's security features and purchase the level of service that has the desired/necessary security features;
- Check security settings, enable encryption and any available privacy controls (especially those limiting who can join the conference), and ensure that default settings are set by company management;
- Check each videoconference platform's recording features and disable recording or ensure that recording is on a company-controlled server. Inform participants if the videoconference will be recorded;
- Instruct employees not to forward videoconference invites without the host's permission (or restrict forwarding, if possible);
- Provide written policies and periodic reminders requiring employees to keep videoconferences private from other household residents by using (a) a private room; (b) headphones; and/or (c) privacy shields for screens;
- Check whether the videoconference platform automatically creates transcripts and either disable that feature or set policies controlling who may access the transcript and how it is used. Inform participants of any transcription;
- If a trade secret will be discussed, ensure the only participants in the videoconference are those who (a) are bound to keep the secret confidential (such as employees who have signed an NDA) and (b) are those who reasonably need access to the trade secret;
- If privileged information will be discussed or shown, ensure the only participants are those who share a privileged relationship (plus at least one lawyer who actively participates). As noted, for a corporation, privileged persons typically include officers, directors, managers, and the personnel involved in the privileged matter in the scope of their employment;
- Provide written policies and periodic reminders regarding the recording in any way of videoconferences, including the use of screen capture tools, cameras, and microphone-equipped electronic devices to record the videoconference;
- Provide written policies and periodic reminders informing employees about proper handling of videoconference notes, including limiting access to handwritten notes and shredding notes that contain trade secret or privileged information;
- Train employees and provide periodic reminders to ensure that privileged or trade secret documents are not visible to others on videoconferences, including on after-hours social videoconferences—which may occur in the employee's work-from-home space.
These are unprecedented times and there are no set rules for what constitutes "reasonable" steps, but implementing some simple steps can help protect confidentiality, and ensure employees participating in videoconferences understand the pertinent risks and appropriate behavior to avoid them.
Diana Torres, Allison Buchner and Lauren Schweitzer are members of Kirkland & Ellis LLP's Intellectual Property Litigation group and represent clients in trade secret, copyright, trademark, false advertising and similar disputes.
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
NOT FOR REPRINT
© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
You Might Like
View AllA Blueprint for Targeted Enhancements to Corporate Compliance Programs
7 minute readThree Legal Technology Trends That Can Maximize Legal Team Efficiency and Productivity
Corporate Confidentiality Unlocked: Leveraging Common Interest Privilege for Effective Collaboration
11 minute readLaw Firms Mentioned
Trending Stories
- 1Trailblazing Broward Judge Retires; Legacy Includes Bush v. Gore
- 2Federal Judge Named in Lawsuit Over Underage Drinking Party at His California Home
- 3'Almost an Arms Race': California Law Firms Scooped Up Lateral Talent by the Handful in 2024
- 4Pittsburgh Judge Rules Loan Company's Online Arbitration Agreement Unenforceable
- 5As a New Year Dawns, the Value of Florida’s Revised Mediation Laws Comes Into Greater Focus
Who Got The Work
Michael G. Bongiorno, Andrew Scott Dulberg and Elizabeth E. Driscoll from Wilmer Cutler Pickering Hale and Dorr have stepped in to represent Symbotic Inc., an A.I.-enabled technology platform that focuses on increasing supply chain efficiency, and other defendants in a pending shareholder derivative lawsuit. The case, filed Oct. 2 in Massachusetts District Court by the Brown Law Firm on behalf of Stephen Austen, accuses certain officers and directors of misleading investors in regard to Symbotic's potential for margin growth by failing to disclose that the company was not equipped to timely deploy its systems or manage expenses through project delays. The case, assigned to U.S. District Judge Nathaniel M. Gorton, is 1:24-cv-12522, Austen v. Cohen et al.
Who Got The Work
Edmund Polubinski and Marie Killmond of Davis Polk & Wardwell have entered appearances for data platform software development company MongoDB and other defendants in a pending shareholder derivative lawsuit. The action, filed Oct. 7 in New York Southern District Court by the Brown Law Firm, accuses the company's directors and/or officers of falsely expressing confidence in the company’s restructuring of its sales incentive plan and downplaying the severity of decreases in its upfront commitments. The case is 1:24-cv-07594, Roy v. Ittycheria et al.
Who Got The Work
Amy O. Bruchs and Kurt F. Ellison of Michael Best & Friedrich have entered appearances for Epic Systems Corp. in a pending employment discrimination lawsuit. The suit was filed Sept. 7 in Wisconsin Western District Court by Levine Eisberner LLC and Siri & Glimstad on behalf of a project manager who claims that he was wrongfully terminated after applying for a religious exemption to the defendant's COVID-19 vaccine mandate. The case, assigned to U.S. Magistrate Judge Anita Marie Boor, is 3:24-cv-00630, Secker, Nathan v. Epic Systems Corporation.
Who Got The Work
David X. Sullivan, Thomas J. Finn and Gregory A. Hall from McCarter & English have entered appearances for Sunrun Installation Services in a pending civil rights lawsuit. The complaint was filed Sept. 4 in Connecticut District Court by attorney Robert M. Berke on behalf of former employee George Edward Steins, who was arrested and charged with employing an unregistered home improvement salesperson. The complaint alleges that had Sunrun informed the Connecticut Department of Consumer Protection that the plaintiff's employment had ended in 2017 and that he no longer held Sunrun's home improvement contractor license, he would not have been hit with charges, which were dismissed in May 2024. The case, assigned to U.S. District Judge Jeffrey A. Meyer, is 3:24-cv-01423, Steins v. Sunrun, Inc. et al.
Who Got The Work
Greenberg Traurig shareholder Joshua L. Raskin has entered an appearance for boohoo.com UK Ltd. in a pending patent infringement lawsuit. The suit, filed Sept. 3 in Texas Eastern District Court by Rozier Hardt McDonough on behalf of Alto Dynamics, asserts five patents related to an online shopping platform. The case, assigned to U.S. District Judge Rodney Gilstrap, is 2:24-cv-00719, Alto Dynamics, LLC v. boohoo.com UK Limited.
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250