When lawyers get together to negotiate confidentiality and nondisclosure agreements, there's a dance we go through. Everyone knows the steps in advance. We just wait for the right moment and change of beat to respond. You ask for a carve out of the "public knowledge" information, and I step forward with the "not disclosed in violation of any contractual or legal confidentiality obligation." You counter with "to our knowledge" and I step forward with "or should have known."
As long as you're dealing with experienced privacy practitioners, the dance moves ahead and everyone is happy. For every point, there is an exception, for every exception another point. If one lawyer knows more about these kinds of agreements than the other, perhaps the contract is a bit one-sided, but certain exceptions are considered standard.
One of those exceptions is for legally required disclosures. The language may differ from contract to contract, depending on the template or model used, but essentially the standard exceptions allow the recipient of the confidential information to disclose it pursuant to a court order or other legal process. A knowledgeable lawyer will demand, in exchange for this permitted disclosure, that notice is given to the person or entity protected by the agreement in advance of the disclosure. This allows the protected party to seek a protective order to stop the disclosure, or otherwise challenge the legal process before the information is disclosed.
So what do you do? Think ahead! Look over your confidentiality and nondisclosure agreements now, before the government comes knocking. And reach out to the other parties to those agreements notifying them that the Patriot Act prohibits any complying party from disclosing the inquiry or information turnover to the party being investigated. Let them know that in the event an inquiry is made that would otherwise be covered by the agreement, the notice will not be given.
This can be done via a simple letter with a place for their acknowledgement, which is returned to you signed. This letter, if prepared properly, amends the agreement and allows you to comply with the law without risking unnecessary legal exposure. And all future agreement should reflect that, notwithstanding the provision requiring advance notice of legal process before disclosure, all bets are off when the Patriot Act is involved.
Once again, forewarned is forearmed when it comes to privacy.
How Enterprises Are Attacking the IT Security EnterpriseTo learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
Infographic: The State of DevOps in 2017Is DevOps helping organizations reduce costs and time-to-market for software releases? What's getting in the way of DevOps adoption? Find out in this InformationWeek and Interop ITX infographic on the state of DevOps in 2017.
2017 State of IT ReportIn today's technology-driven world, "innovation" has become a basic expectation. IT leaders are tasked with making technical magic, improving customer experience, and boosting the bottom line -- yet often without any increase to the IT budget. How are organizations striking the balance between new initiatives and cost control? Download our report to learn about the biggest challenges and how savvy IT executives are overcoming them.