Sedona Conference Publishes Information Security Guidelines For Law Firms

On November 13, 2015 the Working Group on Electronic Document Retention and Production of the Sedona Conference published its Commentary on Privacy and Information Security.

The Commentary sets out principles and guidelines for lawyers and law firms. This follows the publication, in July 2015 of a public comment version of those guidelines. The Commentary is a further example of the "guidelines and principles approach" that a number of regulators and industry associations have implemented over the last two years. These go a long distance toward setting the common law duty of care, on an industry by industry basis. This Commentary is no exception.

The Commentary recognizes that effective privacy in information security varies with the nature of the information, the needs of the client and the circumstances which information is held, among other factors. It does not allow for a "one size fits all solution". The Commentary therefore sets out principles by which