Legal departments can avoid being overwhelmed by regulatory investigations if they handle cases correctly, according to experts at a Legalweek panel last week titled "Regulators Always Ring Twice."

That means knowing your data, educating employees about their rights and ensuring you have the right privacy team handling the case, the panelists said.

Shana Simmons, general counsel at Everlaw, which helps law firms and in-house leaders with discovery and investigatory challenges, said the consequences of missteps can be severe, including hefty fines and reputational harm.