Having an IG Policy Isn't Enough: Strategies for IG Execution
After you've developed IG policies, how do you make sure the right people implement them consistently?
November 03, 2017 at 08:00 AM
7 minute read
Information governance is far from a new concept. Most firms understand the need to invest time and resources into developing policies and procedures to manage the vast amounts of information in their possession. But anyone who has considered IG policies knows the difficulties that come with properly executing them.
Understanding the pitfalls and avoiding them, however, are two different things. Because of the historically manual processes and large volumes of information involved, the risk of falling behind on your obligations is always high—especially today when the average lawyer is handling increased caseloads while facing client pressures to be more efficient. Even when the risks of noncompliance are clear, it's still easy to fall short.
So, now that you've developed comprehensive IG policies around content life cycle management, how do you make sure the right people implement them consistently? The answer lies in automation.
Technology can make executing your IG policies infinitely easier than it would ever be to carry out the processes manually. Gone are the times of running a manual search for matters that are ready for disposition, sending a memo to the responsible parties, waiting for signoffs on destroying files and then starting the destruction process when those approvals finally surface. Today's technology can automate these processes and trigger the steps leading to review and disposition, to help guarantee compliance for both internal policy and outside counsel guidelines (OCG.)
A large part of executing any retention policy is the review structure. If you have, for example, one requiring destruction of information for cases closed for seven years, what's the best way to ensure that the policy is actually executed? For many firms, this means addressing hundreds of thousands of boxes of files, on top of several terabytes of data, all subject to the same policies.
Regardless of the type of data, the best way to implement and manage your policy is to find a tool designed specifically for compliance. The idea is to take what has long been a complex, manual project with many moving parts and put it into a logical, automated process.
Using matter close date plus x years as the trigger for review and disposition is common practice among law firms. Applying the rule against the matter and then having it trigger the disposition review is critical. In our example, any matter that has been closed over seven years will be triggered for review and ultimate destruction of data. For new matters, the process is easy. Any newly opened matter can have the policy applied to it at the time the matter is opened, which will simply wait for a closed date to be entered and kick off disposition whenever the time is right. With historical matters, the first step is setting up your policy management tool to integrate with your existing repositories, whether you have document management systems, shared drives or your records management system for physical files, to identify matters meeting the criteria.
Work flow to manage the disposition review process and executing the policy requirements will help guarantee compliance with your policies or OCG. Most policies will require each matter to have an assigned reviewer, so as part of the work flow, this reviewer can receive a notice containing the list (or a link to the list or system dashboard) of matters to be reviewed. From there, the reviewer provides approval for destruction or a reason for retention to be delayed. The simpler it is for reviewers to respond, the more likely they are to do it in a timely manner.
Automating notifications will ensure reviews are initiated and completed on a regular schedule, in accordance with your IG policy. Modern RIG systems will automatically generate notices throughout the process, from instructing the attorneys, GC and RIG staff when to begin, to handling escalations, and warning when the review period is coming to an end. Many also provide the option to link the designated reviewer for a matter to the responsible attorney in the firm's billing records, preventing gaps that often occur from staffing changes or attorneys leaving the firm. If the responsible attorney still fails to do the necessary review, the policy can include a process for reassigning or escalating the matter to a next level of review after a certain period.
An automated system can also take into account other factors affecting the disposition schedule, like litigation holds, OCG differing from internal IG policies or clients demanding all files be returned to them after a certain time. By tracking all this information automatically, you remove the need to manually juggle competing considerations for a given matter. Keep in mind that clients are asking to review procedures and processes more and more around IG. You should be ready to provide auditable reports on execution of policies so that clients can review them if they need to.
What if you have 20 or 30 years' worth of information that's never been addressed for disposition? Obviously, executing your IG policy would be a very time-consuming manual process that could seem overwhelming. Having any automation that can ease the workload by breaking it down into manageable chunks is helpful—for example, by scheduling the handling of the previous year's files in the upcoming quarter, the prior two years' files in the following quarter and continuing on until all the necessary reviews are complete. In some cases, you might find matters sitting idle for 20 years but never officially closed. A systematic review allows you to develop a procedure for handling those, whether it's closing them or deciding to work from a last-billed date, rather than a closed date.
Automating the retention disposition process can provide a firm with a wealth of data for reporting. Destruction reporting can typically indicate how storage space was saved for physical records, and therefore how much was saved in vendor storage costs. Disposition reporting also shows how much disk space was opened by deleting electronic records. And, since most work product is kept seven years or longer, forecast reports would be virtually 100 percent accurate looking forward seven years. Imagine being able to show partners the cumulative savings from future dispositions by implementing the kind of IG clients want anyway.
Automation and reporting your policies can provide not only a much better sense of how successfully you are executing them, but also identifiable trends in the amounts of data you can expect to store going forward, allowing you to predict what your future storage needs will be. By knowing which matters will be disposed of in a given time frame and which will continue to accumulate, you'll have a better sense of your overall cost expenditures for both physical and electronic storage.
Automating your IG policy practices will achieve much more than lowering risk, cost and meeting compliance. You'll know that your handling of IG related to matters is consistent.
Darrell Mervau is a co-founder and president of FileTrail Inc., a global leader in records management and information governance. Having spent his entire career in the field of information management and governance, Mervau previously held executive roles with two different start-up companies and was instrumental in their early growth and successful sale.
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
NOT FOR REPRINT
© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
You Might Like
View AllTrending Stories
Who Got The Work
Michael G. Bongiorno, Andrew Scott Dulberg and Elizabeth E. Driscoll from Wilmer Cutler Pickering Hale and Dorr have stepped in to represent Symbotic Inc., an A.I.-enabled technology platform that focuses on increasing supply chain efficiency, and other defendants in a pending shareholder derivative lawsuit. The case, filed Oct. 2 in Massachusetts District Court by the Brown Law Firm on behalf of Stephen Austen, accuses certain officers and directors of misleading investors in regard to Symbotic's potential for margin growth by failing to disclose that the company was not equipped to timely deploy its systems or manage expenses through project delays. The case, assigned to U.S. District Judge Nathaniel M. Gorton, is 1:24-cv-12522, Austen v. Cohen et al.
Who Got The Work
Edmund Polubinski and Marie Killmond of Davis Polk & Wardwell have entered appearances for data platform software development company MongoDB and other defendants in a pending shareholder derivative lawsuit. The action, filed Oct. 7 in New York Southern District Court by the Brown Law Firm, accuses the company's directors and/or officers of falsely expressing confidence in the company’s restructuring of its sales incentive plan and downplaying the severity of decreases in its upfront commitments. The case is 1:24-cv-07594, Roy v. Ittycheria et al.
Who Got The Work
Amy O. Bruchs and Kurt F. Ellison of Michael Best & Friedrich have entered appearances for Epic Systems Corp. in a pending employment discrimination lawsuit. The suit was filed Sept. 7 in Wisconsin Western District Court by Levine Eisberner LLC and Siri & Glimstad on behalf of a project manager who claims that he was wrongfully terminated after applying for a religious exemption to the defendant's COVID-19 vaccine mandate. The case, assigned to U.S. Magistrate Judge Anita Marie Boor, is 3:24-cv-00630, Secker, Nathan v. Epic Systems Corporation.
Who Got The Work
David X. Sullivan, Thomas J. Finn and Gregory A. Hall from McCarter & English have entered appearances for Sunrun Installation Services in a pending civil rights lawsuit. The complaint was filed Sept. 4 in Connecticut District Court by attorney Robert M. Berke on behalf of former employee George Edward Steins, who was arrested and charged with employing an unregistered home improvement salesperson. The complaint alleges that had Sunrun informed the Connecticut Department of Consumer Protection that the plaintiff's employment had ended in 2017 and that he no longer held Sunrun's home improvement contractor license, he would not have been hit with charges, which were dismissed in May 2024. The case, assigned to U.S. District Judge Jeffrey A. Meyer, is 3:24-cv-01423, Steins v. Sunrun, Inc. et al.
Who Got The Work
Greenberg Traurig shareholder Joshua L. Raskin has entered an appearance for boohoo.com UK Ltd. in a pending patent infringement lawsuit. The suit, filed Sept. 3 in Texas Eastern District Court by Rozier Hardt McDonough on behalf of Alto Dynamics, asserts five patents related to an online shopping platform. The case, assigned to U.S. District Judge Rodney Gilstrap, is 2:24-cv-00719, Alto Dynamics, LLC v. boohoo.com UK Limited.
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250