Showing posts with label Data Protection. Show all posts
Showing posts with label Data Protection. Show all posts

Wednesday, 13 April 2011

Watching the Paper

Law firms love paper. There is tons of it - when I was last employed by a firm, we measured our paper usage by weight...

This blog post by IBB Solicitors caught my eye - it deals with a warning dished out  by the Information Commissioner in connection with the way that paper records were managed by the Council for Healthcare Regulatory Excellence (and they were asking for trouble calling themselves that...) and by NHS Liverpool Community Health. The quote from the Acting Head of Enforcement is telling:
“These incidents should act as a warning to other organisations who handle sensitive papers of the need to make sure their paper records management processes are as robust as their electronic data systems. The protection of data in all formats must be taken seriously.” 
Law firms handle lots of sensitive paper with reams of it delivered every day. How many firms are really sure that their systems are sufficiently robust to ensure its security at every stage of its use and storage? I suspect not that many.

I spend quite a bit of time in law firms of differing sizes and it is usually fairly easy to come into contact with a pile of paper relating to one of the firm's matters. Just as importantly, however, is the care of incoming paper within the firm. If there was a fire or flood in your post room or office, would you really know what piles of paper had been destroyed. Is everything scanned when it comes into the building? Is it logged before it is scanned? If it is both logged and scanned - I bet that is a significant cost that the firm is looking very closely at...

This warning highlights the importance of having systems in place to ensure that paper records are managed as effectively as computer records. They must be in the right place at the right time so that they are valuable to the firm - and the firm must know what paper records they have (and where they are) at all times.

Thanks to IBB Solicitors for picking this one up and mentioning it on their Twitter feed (@IBB_Solicitors).

Monday, 5 October 2009

Outsourcing Revisited

With the announcement from Slaughter & May that they are "in talks with an LPO [LegalProcess Outsourcing] supplier", the legal world is again aflame on the subject of outsourcing.

I have already written once on this subject (here) and James Dunning had more to say on the subject (here), but I remain concerned that the notion is not always going to be thought through by some firms. The implication from some of the press coverage is that "if Slaughters are doing it then it's mainstream and so we should all be doing it...". Let me just set down some of my concerns:
  • Slaughter & May are not yet outsourcing anything. They are "in talks" with a supplier. That can mean anything, or nothing.
  • I wrote before about client concerns. How will a client feel about work being outsourced? What safeguards will be retained? Consider a medical example. A routine piece of surgery can, one might argue, be carried out anywhere since its simple and so should be carried out as efficiently as possible - which might mean in a small local hospital, or a private clinic. That's fine unless something goes wrong. I'd prefer to pay a little more to have a procedure done in a large teaching hospital so that, if the less that 1% chance of failure occurs, I will be surrounded by highly trained (and so expensive) people who can step in and take over. The same is true for a "simple" client matter. 99 times in 100 there will be no problems - but what will happen in those 1% cases? Who will be there to step in and sort things? How quickly will the lead lawyers find out that there is a problem.
  • Consider this too - how often has a client told you that a piece of work will be simple - only for you to find that it's not? How commoditised can legal work - especially that of the largest firms handling the more complex tasks - be?
  • How will the data protection act apply. My (somewhat limited) understanding is that special measures will be required if private or personal data is to be processed outside the EU (or EEAA). Will outsourced "partners" have full access to the matter files? Can they perform adequately if they do not? I know of firms where the partners (that's the partners in the law firm - sorry for the confusion) have concerned about secretaries from other departments having access to files - never mind employees of different companies.
  • How will outsourced work be fitted into staff reviews and bonus considerations? How will departments react to not being able to pad hours on "grunt work"? At what point will the law firm's "value added" come into the process? I'm not sure how happy I would be to receive a bill from a partner briefly reviewing outsourced work and stating "it's fine".
  • How will the law firm control the outsourcing third party. What skills will be required to manage the relationship. I'm sure that legal knowledge and training will not help much - so who will manage the liaison?
This is not to say that I think outsourcing is a bad thing. It is probably a good thing - but care must be taken before jumping onto the bandwagon. It needs to be the right thing for your law firm and you need to be absolutely sure that you fully understand what benefit the firm and its clients will receive.