When lawyers get together to negotiate confidentiality and nondisclosure agreements, there's a dance we go through. Everyone knows the steps in advance. We just wait for the right moment and change of beat to respond. You ask for a carve out of the "public knowledge" information, and I step forward with the "not disclosed in violation of any contractual or legal confidentiality obligation." You counter with "to our knowledge" and I step forward with "or should have known."
As long as you're dealing with experienced privacy practitioners, the dance moves ahead and everyone is happy. For every point, there is an exception, for every exception another point. If one lawyer knows more about these kinds of agreements than the other, perhaps the contract is a bit one-sided, but certain exceptions are considered standard.
One of those exceptions is for legally required disclosures. The language may differ from contract to contract, depending on the template or model used, but essentially the standard exceptions allow the recipient of the confidential information to disclose it pursuant to a court order or other legal process. A knowledgeable lawyer will demand, in exchange for this permitted disclosure, that notice is given to the person or entity protected by the agreement in advance of the disclosure. This allows the protected party to seek a protective order to stop the disclosure, or otherwise challenge the legal process before the information is disclosed.
So what do you do? Think ahead! Look over your confidentiality and nondisclosure agreements now, before the government comes knocking. And reach out to the other parties to those agreements notifying them that the Patriot Act prohibits any complying party from disclosing the inquiry or information turnover to the party being investigated. Let them know that in the event an inquiry is made that would otherwise be covered by the agreement, the notice will not be given.
This can be done via a simple letter with a place for their acknowledgement, which is returned to you signed. This letter, if prepared properly, amends the agreement and allows you to comply with the law without risking unnecessary legal exposure. And all future agreement should reflect that, notwithstanding the provision requiring advance notice of legal process before disclosure, all bets are off when the Patriot Act is involved.
Once again, forewarned is forearmed when it comes to privacy.
How Enterprises Are Attacking the IT Security EnterpriseTo learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
Infographic: The State of DevOps in 2017Is DevOps helping organizations reduce costs and time-to-market for software releases? What's getting in the way of DevOps adoption? Find out in this InformationWeek and Interop ITX infographic on the state of DevOps in 2017.
IT Strategies to Conquer the CloudChances are your organization is adopting cloud computing in one way or another -- or in multiple ways. Understanding the skills you need and how cloud affects IT operations and networking will help you adapt.