Law.com Subscribers SAVE 30%

Call 855-808-4530 or email [email protected] to receive your discount on a new subscription.

The Role of Encryption in Law Firm Data Security

By David Greetham and David Levine
August 01, 2017

Incidents over the last few years leave little doubt that hackers are increasingly targeting law firms. The data breach of law firm Mossack Fonesca, known as the Panama Papers, last April was the largest known and highest profile. The thieves took 2.6 terabytes of data, including 2.2 million PDFs, 3 million database files and 4.8 million emails. (For more on the Panama Papers, see, “The 'Panama Papers' and You,” a two-part article in our sibling LJN newsletter, Business Crimes Bulletin.)

Yet, many law firms don't use even basic encryption. In the ABA's 2016 Legal Technology Survey, only 38% of respondents reported using file encryption, only 26% use email encryption for confidential or privileged communications and documents sent to their clients, and only 15% use drive encryption.

Encryption can play a vital role in securing data, but it needs to be considered within the context of a firm's overall IT security strategy. In the Panama Papers breach, for example, the law firm's lack of the use of encryption was only one of many other security flaws, including failure to keep software patched and log-in credentials up to date. Whether, when and how to encrypt requires a careful look at what data the firm keeps, and how much protection it needs. This article explains how encryption can be used to guard against the reputational, financial and legal damage a breach of sensitive data can cause to law firms.

This premium content is locked for Entertainment Law & Finance subscribers only

  • Stay current on the latest information, rulings, regulations, and trends
  • Includes practical, must-have information on copyrights, royalties, AI, and more
  • Tap into expert guidance from top entertainment lawyers and experts

For enterprise-wide or corporate acess, please contact Customer Service at [email protected] or 877-256-2473

Read These Next
Major Differences In UK, U.S. Copyright Laws Image

This article highlights how copyright law in the United Kingdom differs from U.S. copyright law, and points out differences that may be crucial to entertainment and media businesses familiar with U.S law that are interested in operating in the United Kingdom or under UK law. The article also briefly addresses contrasts in UK and U.S. trademark law.

The Article 8 Opt In Image

The Article 8 opt-in election adds an additional layer of complexity to the already labyrinthine rules governing perfection of security interests under the UCC. A lender that is unaware of the nuances created by the opt in (may find its security interest vulnerable to being primed by another party that has taken steps to perfect in a superior manner under the circumstances.

Strategy vs. Tactics: Two Sides of a Difficult Coin Image

With each successive large-scale cyber attack, it is slowly becoming clear that ransomware attacks are targeting the critical infrastructure of the most powerful country on the planet. Understanding the strategy, and tactics of our opponents, as well as the strategy and the tactics we implement as a response are vital to victory.

Legal Possession: What Does It Mean? Image

Possession of real property is a matter of physical fact. Having the right or legal entitlement to possession is not "possession," possession is "the fact of having or holding property in one's power." That power means having physical dominion and control over the property.

Removing Restrictive Covenants In New York Image

In Rockwell v. Despart, the New York Supreme Court, Third Department, recently revisited a recurring question: When may a landowner seek judicial removal of a covenant restricting use of her land?