Onshore Servers and Data Security

During March we’ll be discussing part two of our series Ethical Imperatives For An LPO: Protecting Client Confidentiality. And a key component to protecting confidentiality is data security.

For U.S. attorneys considering the value of outsourcing legal work to an LPO, there is one question that must come first regarding data security: Are the LPO’s servers on U.S. soil?

All other security safeguards come second.

When all data is stored in onshore servers, offshore attorneys are only accessing the data to complete the work, and not holding or storing the data on offshore computers or servers.

Why is this so crucial? Because data stored on servers is subject to the state and federal laws applicable to the physical location of the data. That means for data housed on domestic servers, U.S. law applies. In the rare event of some sort of breach, the originating counsel needs to retain as much recourse as possible, and part of that includes U.S. jurisdiction over the server.

Data stored on offshore servers puts the data beyond the jurisdiction of established U.S. security laws. In this instance, the originating counsel would have uncertain control over investigating and/or enforcing security concerns.

Additionally, while the risk of third-party data security breaches (that’s a lot of syllables to say “hacker”) is the same regardless of the server’s physical location, the United States’ long-arm statutes allow plaintiffs to extend personal jurisdiction throughout the country. Just one more advantage to requiring onshore servers from your LPO.