My latest blog post for IPRO’s blog discusses how perhaps the biggest challenge for organizations regarding their data is that identifying and protecting that sensitive data is a moving target. Why? Because data doesn’t stand still.

Since the General Data Protection Regulation (GDPR) went into effect in May 2018, the stakes for protecting personal data have grown considerably. Add to that US state laws in California, with the California Consumer Privacy Act (CCPA) and its replacement the California Privacy Rights Act (CPRA), Virginia’s Consumer Data Protection Act (CDPA), the Colorado Privacy Act (CPA) and the Utah Consumer Privacy Act (UCPA) (which was just signed last month) and it’s clear that the stakes are higher than ever for protecting sensitive data.

While the stakes are higher for protecting the data, the threats to that data continue to escalate too, as the Identity Theft Resource Center (ITRC) 2021 Data Breach Annual Report released back in January illustrated. For example, in 2021, there were more data compromises reported in the US than in any year since the first state data breach notice law became effective in 2003.

So, why is identifying and protecting sensitive data such a moving target? And what can you do about it? You can find out on IPRO’s blog here. It’s just one extra click!  😉

So, what do you think? Do you feel that identifying and protecting your organization’s sensitive data is a moving target? Please share any comments you might have or if you’d like to know more about a particular topic.

Disclosure: IPRO is an Educational Partner and sponsor of eDiscovery Today

Disclaimer: The views represented herein are exclusively the views of the author, and do not necessarily represent the views held by my employer, my partners or my clients. eDiscovery Today is made available solely for educational purposes to provide general information about general eDiscovery principles and not to provide specific legal advice applicable to any particular circumstance. eDiscovery Today should not be used as a substitute for competent legal advice from a lawyer you have retained and who has agreed to represent you.