Privacy and Data Governance
Privacy and data breach notification laws apply to all Arkansas companies, not just multi-national corporations. Companies must protect information about their customers when receiving data, moving data, storing data, and destroying data. In addition to about 23 Federal laws that may apply, there are presently 46 different State statutes that may apply to a company, depending on where the company’s customers reside.
We educate people about privacy and data governance issues.
Companies need to consider:
What data do we collect?
From whom and from where?
How do we collect data?
Do we have the right to collect and store data?
Once acquired, how do we store and protect the data?
Who can access the data, and how can the data be accessed?
In what ways do we use the data?
To whom do we disclose the data?
Does the company have all the necessary and proper approvals and consents from the data provider for any disclosures?
What procedure and policy does the company follow in the event of a data breach?
Are there industry-specific rules and regulations covering the company of which the company should be aware?
The attorneys in our privacy and data governance group work with companies of all sizes to provide practical, legal compliance advice and counsel on how to comply with the privacy and data security statutes, rules, and regulations.
We also provide our clients with on-site employee training to answer questions about how to adopt best practices to avoid future expensive data breaches and litigation.
We serve as trial counsel for prosecuting or defending privacy allegations in State and Federal courts.
Practitioners
Christopher L. Travis, Drake Mann