Author

Theo Ling

Browsing

It is trite but true: Information is one of a business’s most valuable assets. Yet just like oil, if not handled properly, it can cause serious damage. That’s why a business’s information governance (IG) team needs to be carefully considered and planned—its members have the important responsibility of understanding the “who, what, where, when and why ” of its data handling activities, helping to mitigate the privacy and security risks associated with those activities, and…

The Irish Companies Act 2014 (the “Act”) is noteworthy from an information governance (IG) perspective because it imposes a new duty on Irish corporate boards to ensure that individuals appointed company secretary have the necessary skills to maintain records as mandated by the Act. Whether this foreshadows a global regulatory trend towards requiring designated corporate officers to be familiar with IG – or document management – principles, remains to be seen.Most of the 1,448 sections…

Letting employees use their personal devices for work purposes can make good business sense for a company. Apart from potentially saving on overhead, many employees are happier and will work longer and more effectively if they can use their own devices for both professional and personal activities. Companies should nevertheless make sure they’ve covered off their data security and privacy risks before launching a bring your own device (BYOD) program. Security and privacy sometimes seem to…

The popular North American television show, “Hoarders,” features people who store and keep every item that ever comes into their possession – including items that most people would simply toss. Most people featured on the show see no problem with keeping mountains of items, “just in case.” Each episode usually ends with professional sorting, organizing, removing, and managing the mountains of items.The main draw of this show is the tug-of-war dynamic that occurs between the…

When companies that meet certain thresholds merge in Canada, the parties are required to get permission from the Competition Bureau to go through with the merger plan. Often, these requests for permission are met with supplementary information requests (‘SIRs’) from the Bureau. SIRs are requests for data, e-mails and other information that will allow the Bureau to evaluate the effect and veracity of the merger firsthand. The requests, as articulated in SIRs, are generally intentionally…

Information governance (IG) obligations applicable to the healthcare sector are expanding amidst a growing recognition by regulators that the rules governing the management of personal health information need to be stronger. This perception has been fuelled in part by a growing reliance on electronic health record systems, the sensitivity of personal health information, and a number of high-profile data breaches involving healthcare service providers.For example, the Ontario Ministry of Health and Long-Term Care has proposed…