Corporate records are important assets. The law requires companies to maintain certain types of corporate records, usually for a specified period of time. Failure to retain those records for those minimum periods could subject you and the company to penalties and fines, cause the loss of rights, obstruct justice, spoil potential evidence in a lawsuit, place the company in contempt of court, or seriously disadvantage in litigation.

Here are some usful tips to create a Document Retention Policy.

1. Have a written document retention plan and make sure all employees acknowledge that they read the policy. Add a cover sheet with an acknowledgement and they should sign off on it every year or so.

2. Specify the individuals responsible for enforcing, monitoring and updating the policy.

3. Drafts of documents and notes should be scheduled for destruction soon after the final document is created. Keep only the final document, not all the drafts and changes that lead up to it.

4. Remove any post it notes or similar flags in paper files. They can cause confusion if they are misplaced.

5. Backup electronic records on-site and keep a duplicate copy offsite,but make sure both copies are destroyed at the same time.

6. Make sure the backup is automated or that employees are following your backup company’s instructions. Employees may not appreciate how important the data is. You own their work, that’s what your paying them for. You want to make sure you will continue have their work when they are gone.

7. Require that employees aggressively manage e-mail. Keeping e-mails in labeled outlook folders, not discussing sensitive items in e-mails and clearly labeling e-mails with documents or important discussions.

8. Test your backup. Try and retrieve documents periodically and see if it works.

9. Provide for suspension of record destruction in the event of a client’s pending or ongoing litigation.

10. When the time comes to destroy the records do it consistently for all documents in the relevant category. Also, you may want to keep a  master list or database of the destroyed files.

 Rule 1.15 of the New York Rules

The current New York Rules of Professional Conduct require licensed New York Attorneys to keep most client records for a Minimum of Seven Years after the date of the events of record. Most of these files may be maintained in electronic form.

 What’s the risk? 

  • “A lawyer who does not maintain and keep the accounts and records as specified in and required by this rule, or who does not produce any such records pursuant to this rule shall be deemed in violation of these rules and shall be subject to disciplinary proceedings.” [Rule 1.15] 
  • The records required to be maintained by the rule must be made available and produced in response to a request from the appropriate disciplinary committee or Appellate Division. 
  • Market Risk: Client may ask for documents or you may be required to produce documents in connection with client litigation.  You may be seen as sloppy, unreliable, unprofessional or worse…uninformed or out of date with regards to technology if you cannot produce them in a timely fashion. 

General Rules:

“Client Property” Must be returned to the client or maintained indefinitely:

 A: What is Client Property?

 1. “That which the client has entrusted to the attorney, such as original  documents, photographs and things.“

2. “that which has been created or obtained by the attorney as part of the undertaking and for which the client retained the attorney.” Such as original wills, trusts, deeds and executed contracts.

 How to Maintain Your Data Properly to avoid becoming a Statistic?

 The Best Approach:

 Make a copy or scan an electronic copy of any of these types of    materials and then return the original to the client.

If You Choose to Keep Original Documents For Your Client:

- You must safeguard that property; keep it in a locked office, in a safe box …

- Files with client property must be properly segregated so that they are not destroyed as you will need to maintain them indefinitely.

 Everything else (non-client property) must be maintained for seven (7) years after the representation has ended. 

Except

- Criminal case files must be maintained for the life of the defendant.

- To the extent that your file contains information that your client is required to maintain pursuant to state or federal law you must also maintain that file for as long as required by that state or federal law which is applicable to your client. 

OSHA requires medical records pertaining to employees exposure to toxic substances be retained for the duration of the employment plus 30 years. If you were involved in an OSHA litigation and you have that information in the file you may be required to keep it for over 30 years!

 Stay tuned for Part 2 to be continued in our next post…

Email privacy and security is one of the greatest concerns in today’s world. Government agencies, large businesses, small businesses and private individuals make intense efforts to secure business information.

If your business falls under the umbrella of privacy laws and you face potential legal liability for misplaced data you need to make sure you follow this practical advice to keep your email account secure and to safeguard your business data.

1. Regularly Check for Viruses and Malware.

Run a scan on your    computer with a trusted anti-virus software. If the scan detects any  suspicious  programs or applications, remove them immediately.

2. Regularly Backup Your Email Account. (At least two copies, on-site and off-site) -  Make sure your backup is up-to-date in case you need to   recover important emails.

3. Change Your Password at Least Twice a Year.
Make sure you choose a password that contains a combination of numbers, characters, and case-sensitive letters to rengthen the security of your account.

4. Perform Regular Operating System and Browser Updates.
Whether you use Windows or Mac OS, we recommend enabling your automatic update setting, and updating when you get a notification.

5. Never Use Your Email Account Password on Another Website.
 If you enter your password in an external website and it’s compromised, someone could try to sign in to your email account with the same   information.

6. Protect Your Password.
Never enter your password after following a link in an email from an untrusted site.

7. Use a Secure Connection When Signing in.
In your email settings, select ‘Always use HTTPS.’ This setting protects your information from being stolen when you’re signing in to your      email account on a public wireless network, like at a cafe or hotel.

   
For more information on how to protect your business data click here.

Have a wonderful day!

Page 1 of 212