Video depositions are not new. Attorneys have been using them for years to conduct discovery for court cases. They have proven useful when witnesses are unable to appear in court or to pinpoint inconsistencies in testimonies. They also offer lawyers a more impactful way of presenting a deposition to juries. Normally, these video depositions happen on-site in legal offices, with the presence of a court reporter to transcribe the deposition, a legal videographer, and the lawyers of both parties.<\/p>\n
However, during the COVID-19 pandemic, with stay-at-home orders in place, video depositions began being conducted and recorded remotely. As a consequence, a wealth of highly sensitive data was suddenly created. In the aftermath of the pandemic, remote video depositions are here to stay, but law firms<\/a> now face the difficult task of securing these files against potential data breaches.<\/p>\n According to the\u00a0American Bar Association<\/a> (ABA), 29% of law firms experienced a data breach in 2020. Furthermore, 75% of all security incidents in the legal sector reported to regulators were caused by negligent and malicious employees, according to new\u00a0Freedom of Information (FOI) data<\/a>. Remote video depositions increase the risks associated with employee negligence as it implies individuals working outside the security of offices, sometimes on personal devices whose cybersecurity cannot be managed or verified remotely.<\/p>\n Should video depositions be stolen or made public, attorneys risk not only breaking attorney-client privilege but also causing a mistrial that might considerably delay legal proceedings and cause clients to seek a different law firm to move forward with their case. Such incidents can also severely undermine the public image of a law firm, making clients distrustful that the confidential information they provided the company with will not be leaked publicly.<\/p>\n Data protection is not only crucial from a reputational point of view but can also lead to legal liabilities in case of data breaches. Data protection regulations such as the EU\u2019s General Data Protection Regulation<\/a>\u00a0(GDPR) and the\u00a0California Consumer Privacy Act<\/a>\u00a0(CCPA) apply not only to specialized fields but to most organizations collecting and processing sensitive information such as personally identifiable information<\/a> (PII), which all video depositions contain as witnesses must identify themselves as part of the process. Companies that fail to protect this data face steep fines.<\/p>\n Video depositions are large media files that need to be shared with various parties and are usually edited for trials as some questions or information provided during the deposition may not be admissible in court. Due to their size, video depositions cannot be easily shared via simple emails. They need to either be transferred over the internet using cloud or file sharing services or copied onto removable devices, which are then physically transferred to other employees or relevant court officials. Both of these methods come with associated risks.<\/p>\n When it comes to removable devices such as USBs, due to their size, they can be easily lost or stolen. Transfers over the internet can be risky if employees use their personal accounts or services whose security has not been verified by a company\u2019s IT department. Using insecure cloud or file sharing services can easily lead to data leaks.<\/p>\n Ideally, law firms should provide employees with their own approved services to facilitate such data transfers. However, at the same time, they must ensure that employees use only these trusted services. This can be done through Data Loss Prevention (DLP) solutions<\/a> which allow companies to identify, monitor, and control sensitive data transfers.\u00a0 By using DLP, companies can ensure that employees use only approved services for video deposition transfers. They can also block video depositions from being uploaded on video streaming websites, sent through popular messaging apps, or shared on social media.<\/p>\n DLP solutions like Endpoint Protector<\/a> also offer device control<\/a> features that address the issue of removable devices. Law firms have the option of blocking or limiting the use of USB and peripheral ports as well as Bluetooth connections. There is also the option of USB enforced encryption<\/a> which ensures that any files transferred onto a USB are automatically encrypted with government-approved 256bit AES CBC-mode encryption.<\/p>\n By monitoring the use of ports, companies can also keep track of which employees have copied which video depositions on removable devices and at what time. In this way, law firms can monitor the movements of video depositions at all times, avoiding potential leaks and data loss.<\/p>\n","protected":false},"excerpt":{"rendered":" Video depositions are not new. Attorneys have been using them for years to conduct discovery for court cases. They have proven useful when witnesses are unable to appear in court or to pinpoint inconsistencies in testimonies. They also offer lawyers a more impactful way of presenting a deposition to juries. Normally, these video depositions happen … <\/p>\nLaw firms and data breaches<\/h2>\n
Data security risks associated with video depositions<\/h2>\n