Why FCPA Prosecution Risk Has Become Personal

There was a time when the U.S. Department of Justice primarily focused its attention on prosecuting companies responsible for bribing foreign officials. Critics of this practice argued that the resulting fines had become just another cost of doing business. So, about eight years ago, the DoJ announced a new strategy of targeting corporate officers and directors for criminal prosecution under the Foreign Corrupt Practices Act (FCPA) in order to more significantly deter global corporations from engaging in corrupt practices.

If the number of convictions is any indication, the strategy may be paying off: since 2005, dozens of corporate executives have been convicted of violating the FCPA, paid hefty fines from their personal assets, and spent years in prison. (Of course, companies are still the subject of federal agencies’ wrath: the most recent case will result in Pfizer paying more than $60 million to settle FCPA charges, according to the Wall Street Journal.)

Last month, law firm Chadbourne & Parke released a study of the 61 FCPA prosecutions involving individual defendants over the past six years. A surprising number, 35%, of the defendants were the president, chief executive officer, or chief operating officer of their firm. In all, 53 of the individuals charged with violating the FCPA during this period were senior officers — a staggering 87% of all defendants.

These findings should be of concern to corporate executives worldwide. Though the U.K. Bribery Act — which went into effect earlier this year — has captured headlines as a force to be reckoned with, in many ways, the 33-year-old FCPA still reigns supreme in its threat to CEOs and CFOs who do business in the United States.

To understand the potential magnitude, one need look no further than the recent News of the World phone-hacking scandal that has consumed Rupert Murdoch and his News Corp. for much of the year. The gravest threat of criminal prosecution facing the Murdochs and other senior executives of News Corp. might come not from British authorities, who would directly oversee the publication, but from the FCPA.

via Why FCPA Prosecution Risk Has Become Personal.

Strategy: SaaS and E-Discovery | InformationWeek Reports

SaaS and E-Discovery: Navigating Complex Waters

As SaaS applications become the norm at most enterprises and more and more business data is stored in the cloud, companies are becoming accustomed to evaluating SaaS and cloud providers around key areas such as the security and long-term storage of their data. But they also must consider how their SaaS applications will be affected by e-discovery, the process by which enormous quantities of electronic information are searched and analyzed in the event of a lawsuit.

Is the information you’ve stored on the cloud provider’s premises freely accessible to you? Can it be retrieved on demand, in sufficient quantity and within tight deadlines? Are mechanisms in place to ensure that potentially relevant material isn’t being deleted? Even more important, are you confident that information you thought was deleted is actually gone? Are you ready to stand in front of a judge and prove it?

These questions are best asked of a SaaS provider before an e-discovery event occurs, particularly if you are dealing with cloud apps for e-mail, Office documents and business records, all of which are popular targets of opposing counsel.

Many of the criteria that should be used to evaluate a SaaS provider are also relevant to e-discovery. This should make it simpler to determine whether a SaaS provider can meet e-discovery-specific requirements in a few critical areas, such as the ability to apply legal holds to certain data sets, and to retrieve large volumes of data quickly and in a usable format.

We’ll examine how e-discovery requirements align with many general SaaS considerations, and also discuss features and capabilities specific to e-discovery that IT and legal teams should ensure can be met by a provider. We’ll also review the basics of the e-discovery process, and provide guidance on the use of SaaS-based e-discovery services as a complement to, or alternative for, premises discovery tools. (S2550211)

continued @  InformationWeek Reports ::Strategy: SaaS and E-Discovery.

Oracle launches a public cloud- The Inquirer

SOFTWARE DEVELOPER Oracle is throwing more weight behind its cloud computing strategy and embracing the modern era with the launch of the Oracle Public Cloud, including an Oracle Social Network.

Oracle CEO Larry Ellison unveiled the products at the Open World show in San Francisco on Wednesday, during a keynote in which he also took the opportunity to get his own back on Salesforce chief Mark Benioff.

The idea behind the Oracle Public Cloud is to offer an integrated set of applications and infrastructure, letting firms deploy the latest Fusion applications and middleware, as well as databases, all hosted and managed by Oracle.

The Oracle Public Cloud is designed to be elastic, so that companies can get more or less capacity as needed. It also lets organisations switch between software as a service (SAAS) and on-premise versions of their applications at any point after deployment, as the applications are all built on the same code base.

via Oracle launches a public cloud- The Inquirer.

Oracle launches a public cloud- The Inquirer

SOFTWARE DEVELOPER Oracle is throwing more weight behind its cloud computing strategy and embracing the modern era with the launch of the Oracle Public Cloud, including an Oracle Social Network.

Oracle CEO Larry Ellison unveiled the products at the Open World show in San Francisco on Wednesday, during a keynote in which he also took the opportunity to get his own back on Salesforce chief Mark Benioff.

The idea behind the Oracle Public Cloud is to offer an integrated set of applications and infrastructure, letting firms deploy the latest Fusion applications and middleware, as well as databases, all hosted and managed by Oracle.

The Oracle Public Cloud is designed to be elastic, so that companies can get more or less capacity as needed. It also lets organisations switch between software as a service (SAAS) and on-premise versions of their applications at any point after deployment, as the applications are all built on the same code base.

via Oracle launches a public cloud- The Inquirer.

Pentagon: Cyber attack could prompt military strike | TG Daily

The Pentagon has confirmed that a cyber attack against computer networks in the United States could prompt a retaliatory military strike.

“It would be irresponsible, and a failure of the Defense Department’s mission, to leave the nation vulnerable to a known threat,” Deputy Defense Secretary William Lynn explained during a recent briefing about the DoD’s new cyber strategy.

“[As such], the United States reserves the right, under the laws of armed conflict, to respond to serious cyber attacks with a proportional and justified military response at the time and place of our choosing.”

However, Lynn said the DoD’s cyber strategy ultimately emphasized “denying the benefit of [an] attack.”

“If an attack will not have its intended effect, those who wish us harm will have less reason to target us in the first place,” Lynn said.

He noted that any response to a cyber offensive would be “dictated by the effect,” rather than location.

Concurrently, the president would “consider all the tools he has” if the attack caused significant damage – such as human casualties and massive economic losses.

via Pentagon: Cyber attack could prompt military strike | TG Daily.

Pentagon Loses 24K Files in Huge Cyber Attack | News & Opinion | PCMag.com

The Defense Department was the victim of a cyber attack that resulted in the loss of 24,000 files, Deputy Defense Secretary William J. Lynn III disclosed Thursday.

The attack, which happened in the spring, was perpetrated by “foreign intruders” and affected a defense contractor, Lynn said during a speech at the National Defense University, The Washington Post reported. Lynn did not identify the intruders, and said the theft was “data-related,” Politico said.

In the same speech, Lynn unveiled the department’s new strategy for operating in cyberspace, which is intended to be a unified approach for DoD’s Web-based military, intelligence, and business operations.

“The cyber threats we face are urgent, sometimes uncertain and potentially devastating as adversaries constantly search for vulnerabilities,” Lynn said in a statement. “Our infrastructure, logistics network and business systems are heavily computerized. With 15,000 networks and more than seven million computing devices, DoD continues to be a target in cyberspace for malicious activity.”

The 19-page report has five key goals: treat the Internet as a classroom of sorts to take full advantage of cyberspace’s potential; deploy new defense operating concepts to protect against attacks; partner with other agencies for a government-wide cyber strategy; partner with cyber experts overseas; and tap into the expertise of the private sector.

via Pentagon Loses 24K Files in Huge Cyber Attack | News & Opinion | PCMag.com.

Attorney General Holder Joins Cabinet Officials for the U.S. International Strategy for Cyberspace Announcement « USDOJ: Justice Blog

Speaking at the event, the Attorney General said:

Although we may approach the issue of cyber threats from different perspectives, we are united by our common goals: security, opportunity, openness, and prosperity.  We’re also bound by our shared values – and by our collective concerns.  The 21st-century threats we now face – to both our national and economic security – have no precedent.  They know no borders.  And they demand – not only our constant attention, but also a comprehensive, collaborative, and well-coordinated response.

In this new age of seamless global commerce and instant communication, we all stand to benefit – but only if the information technology being used to drive social, economic, and political progress is secure.  Unfortunately, for every technological or commercial quantum leap that we have made, criminals – and often entire international criminal syndicates – have kept pace.  Thefts of information that would have been impossible in an ink-and-paper world can now be carried out nearly undetected, from almost anywhere.

Today, in communities worldwide, cybercrime threatens the security of our citizens and the integrity of our markets – discouraging investments and stifling innovation; and – all too often – devastating businesses and individual lives.  If we are to meet the goals and responsibilities that we share – protecting public safety and personal privacy, fostering innovation and creativity, and stimulating economic growth – we need a new, cutting-edge framework for preventing and combating cybercrime.  One that’s nimble enough to fight complex, constantly evolving threats – but also strong enough to ensure that essential freedoms are upheld.

That’s precisely why the new International Strategy for Cyberspace is so important.

Today, with the unveiling of this strategy, we are signaling that – nearly a decade since the approval of the Budapest Convention on Cybercrime – a new era of global collaboration, engagement, and vigilance has begun.

via Attorney General Holder Joins Cabinet Officials for the U.S. International Strategy for Cyberspace Announcement « USDOJ: Justice Blog.

Establish a comprehensive e-discovery strategy

In December 2006, amendments to the Federal Rules of Civil Procedure (FRCP) indicated that e-discovery is no longer an optional process for organizations undergoing a lawsuit, audit or government investigation. All private organizations and government agencies must be able to find, capture, and produce electronically stored information (ESI) and content that may be relevant to a judicial or regulatory request.

In an effort to help customers meet their needs around e-discovery, Microsoft has released the Connected E-Discovery Framework. The Connected E-Discovery Framework consists of a technology architecture, best practices recommendations around proactive information management, and a collection of partner-owned vertical litigation support solutions to help customers overcome technology and process challenges they encounter when performing e-discovery.

The Connected E-Discovery Framework is based on the principles found in the Electronic Discovery Reference Model (ERDM). EDRM includes a process model and a set of published guidelines from industry experts that outline how e-discovery is typically conducted. Some of the primary benefits of the Connected E-Discovery Framework include:

Improve e-discovery execution through enterprise wide proactive information management. By maximizing the retention and disposition capabilities across SharePoint Server 2007, Exchange Server 2007, and Office Communication Server 2007 R2, organizations can establish a strong information management plan that maximizes their search capabilities via FAST, which in turn minimizes over-collection during discovery and decreases costs related to collection, preservation, process, review and analysis of ESI. Microsoft client tools such as Office Professional 2007 give users the ability to proactively categorize and metadata tag ESI at creation or edit time, relieving records managers from this burden after records are filed. This creation of content coupled with proactive management of the content reduces the costs associated with ESI collection efforts and increases an organization’s ability to discover and collect what is truly relevant ESI.

Support the entire e-discovery reference model using extensibility and integration features of the Microsoft platform. Microsoft is teaming with industry leading litigation support organizations to provide comprehensive coverage of the detailed needs organizations have when trying to overcome their e-discovery challenges. Whether using SharePoint as a web-based user interface and business process flow engine, using Exchange to search and identify mailboxes and server-based PSTs that have relevant ESI, or Windows Server 2008 R2 file shares where ESI is commonly stored, partner based products are available that cater directly to the individual steps found in the EDRM.

The Connected E-Discovery Framework is the foundation upon which organizations can begin to better create, collect and manage electronically stored information. The Connected E-Discovery Framework can be your foundation for better information management, better litigation preparation, and overall better organizational resource utilization.

via Establish a comprehensive e-discovery strategy.

European Commission sets out strategy to strengthen EU data protection rules

What happens to your personal data when you board a plane, open a bank account, or share photos online? How is this data used and by whom? How do you permanently delete profile information on social networking websites? Can you transfer your contacts and photos to another service? Controlling your information, having access to your data, being able to modify or delete it – these are essential rights that have to be guaranteed in today’s digital world. To address these issues, the European Commission today set out a strategy on how to protect individuals’ data in all policy areas, including law enforcement, while reducing red tape for business and guaranteeing the free circulation of data within the EU. This policy review will be used by the Commission with the results of a public consultation to revise the EU’s 1995 Data Protection Directive. The Commission will then propose legislation in 2011.

“The protection of personal data is a fundamental right,” said Vice-President Viviane Reding, EU Commissioner for Justice, Fundamental Rights and Citizenship. “To guarantee this right, we need clear and consistent data protection rules. We also need to bring our laws up to date with the challenges raised by new technologies and globalisation. The Commission will put forward legislation next year to strengthen individuals’ rights while also removing red tape to ensure the free flow of data within the EU’s Single Market.”

Today’s strategy sets out proposals on how to modernise the EU framework for data protection rules through a series of key goals:

  • Strengthening individuals’ rights so that the collection and use of personal data is limited to the minimum necessary. Individuals should also be clearly informed in a transparent way on how, why, by whom, and for how long their data is collected and used. People should be able to give their informed consent to the processing of their personal data, for example when surfing online, and should have the “right to be forgotten” when their data is no longer needed or they want their data to be deleted.
  • Enhancing the Single Market dimension by reducing the administrative burden on companies and ensuring a true level-playing field. Current differences in implementing EU data protection rules and a lack of clarity about which country’s rules apply harm the free flow of personal data within the EU and raise costs.
  • Revising data protection rules in the area of police and criminal justice so that individuals’ personal data is also protected in these areas. Under the Lisbon Treaty, the EU now has the possibility to lay down comprehensive and coherent rules on data protection for all sectors, including police and criminal justice. Naturally, the specificities and needs of these sectors will be taken into account. Under the review, data retained for law enforcement purposes should also be covered by the new legislative framework. The Commission is also reviewing the 2006 Data Retention Directive, under which companies are required to store communication traffic data for a period of between six months and two years.
  • Ensuring high levels of protection for data transferred outside the EU by improving and streamlining procedures for international data transfers. The EU should strive for the same levels of protection in cooperation with third countries and promote high standards for data protection at a global level.
  • More effective enforcement of the rules, by strengthening and further harmonising the role and powers of Data Protection Authorities. Improved cooperation and coordination is also strongly needed to ensure a more consistent application of data protection rules across the Single Market.

via EUROPA – Press Releases – European Commission sets out strategy to strengthen EU data protection rules.

Web firms face EU data privacy crackdown | EurActiv

Web firms will have to seek Internet users’ explicit consent before downloading their personal data and must make it possible for private information to be deleted for good from the web, according to a European Commission strategy on data protection to be unveiled today (4 November).

BACKGROUND

The use of citizens’ data online has become a subject of intense scrutiny at EU level recently, in part due to controversies surrounding Google’s StreetView mapping service and Facebook’s privacy policy.

While the growing number of tailored products and services offers increased benefits for consumers, it also relies enormously on the use of personal data.

Private information can range from financial data, such as credit card numbers or bank account deposit details, to sensitive info concerning health conditions or sexual and political orientation.

The possibilities for misusing or abusing this information are infinite. It has been suggested that one way to deal with the new situation would be to inform data holders of possible breaches of their personal information. This is expected to raise awareness among consumers and at the same time help tackle the negative effects of data theft.

The first sector to adopt the new approach is telecoms. The current review of the Data Protection Directive, part of the EU’s Digital Agenda, intends to broaden the scope of users’ data privacy to webmail, social networks and online banking, among others.

To read more about the EU Digital Agenda, click here.

MORE ON THIS TOPIC

News:EU regulators keeping close eye on Google

News:Brussels to tighten data protection rules

According to the draft paper, seen by EurActiv, the Commission is gearing up for a crackdown on how web companies, in particular social networking sites and online advertising firms, use citizens’ private data.

“It is […] essential that individuals are well and clearly informed, in a transparent way, by data controllers about how and by whom their data are collected and processed, for what reasons [and] for how long,” reads the draft Commission communication.

Citizens should be kept informed of “what their rights are if they want to access, rectify or delete their data,” according to the paper, entitled ‘A comprehensive strategy on data protection in the European Union’.

via Web firms face EU data privacy crackdown | EurActiv.