Photo of F. Kenneth Graham

As regulators attempt to keep pace with the ever-changing technological landscape, legislation and agency guidance continue to evolve. Two recent developments worth noting:

  1. The clarification and modification of the California Consumer Privacy Act (CCPA)
  2. The release of the U.S. Department of Health and Human Service’s (HHS) voluntary cybersecurity practices for health care organizations

For insights

Both large and small companies can be overwhelmed by the volume of records that they create both in paper and electronic formats. What does your company do with this mountain of paper and electronic records? How long should your company retain and archive such records when considering the myriad of complex federal record retention requirements, state-specific record retention requirements and other government agency standards? A blanket indefinite retention and storage policy related to all of your company’s paper and electronic records is impractical, costly and not the answer!
Continue Reading