Tech Law Talks

Anthony Diana and Therese Craparo are joined by John Collins from Lighthouse to provide an overview of some of the challenges and strategies around data retention and e-discovery with Microsoft’s AI tool, Copilot. This episode explores Copilot’s functionality within M365 applications and the complexities of preserving, collecting and producing Copilot data for legal purposes. The panelists cover practical tips on managing Copilot data, including considerations for a defensible legal hold process and the potential relevance of Copilot interactions in litigation.

Read the rest of this entry »

Anthony Diana and Samantha Walsh are joined by Lighthouse’s Chris Baird as part of our series on what legal teams need to know about Microsoft 365 AI-driven productivity tool, Copilot.

This episode presents an overview of the risks relating to Copilot’s access to and use of privileged and sensitive data and how businesses can mitigate these risks, including using Microsoft 365's access control tools and user training. 

In particular, the episode provides in-depth information about Microsoft 365's sensitivity labels and how they can be used to refine a business’s approach to managing risk associated with privileged and sensitive data stored in Microsoft 365.

Read the rest of this entry »

Anthony Diana and Karim Alhassan are joined by Lighthouse’s John Collins to discuss Microsoft's AI-driven productivity tool, Copilot.

This episode presents an overview of Copilot and its various use cases, the technical nuances and details differentiating it from other generative AI tools, the identified compliance gaps and challenges currently seen in production, and the various risks legal departments should be aware of and accounting for.

This episode also provides a high-level overview of best practices that legal and business teams should consider as they continue to explore, pilot and roll out Copilot, including enhanced access controls, testing and user-training, which our speakers will further expand upon in future episodes.

Read the rest of this entry »

Partners Andy Splittgerber, and Christian Leuthner shed light on recent developments in the use of cloud services and EU data protection issues. This includes a summary of and comments on recent publications by the DSK (the German data protection authorities) as well as recent perspectives on data processors’ reuse of data. Andy and Christian conclude by giving some practical tips for both providers and customers.

Anthony Diana joins Daniel Broderick, co-founder and CEO of BlackBoiler, to discuss how AI is already being used by legal departments to manage contracts, the requirements for making the use of AI for contract management, and how future developments in AI will impact contract management.

To deal with the increased risks surrounding regulatory inquiry, privacy compliance, and cybersecurity, it is vital that private equity firms and their portfolio companies focus on implementing internal policies and procedures to better establish healthy privacy and security hygiene. Please join Anthony Diana, Catherine Castaldo, Sheek Shah and Gary Barnabo to discuss why establishing policies should matter for private equity firms and their portfolio companies and which policies should be prioritized so the private equity firm can more effectively protect itself and its investment.

In today’s day and age, no company is immune from the risks posed by data breaches, and that includes private equity firms and their portfolio companies. Fortunately, there are practices that can be implemented to minimize the risks and effects of a breach if one occurs – practices that protect the value of the portfolio companies. Please join Anthony Diana, Catherine Castaldo, Sheek Shah and Gary Barnabo to discuss why and how tabletop exercises with the private equity firm and its portfolio companies can help the private equity firm more effectively protect itself and its investment.

Technology and data risks at portfolio companies directly impact the value of these companies as these risks are becoming a major focus of due diligence when the companies are sold, often leading to a reduction in purchase price, indemnifications, or, in some instances, killing the deal. Whether you’re faced with a data breach that damages brand reputation or discloses highly valuable, confidential information or with privacy policies that do not allow for the sale of customer information, the importance of portfolio companies proactively managing these risks is paramount and can be done without significant investment.

Gary Barnabo, Anthony Diana, Catherine Castaldo and Sheek Shah discuss these issues at a high level, introducing the concept and offering some steps that private equity companies can take to manage the risks, with future podcasts providing more specific guidance.