It may seem an odd thing to say but the records retrieval business is in reality a people's business. As the field gets ever more interconnected with concerns around data security and privacy, and the multifaceted complexity of a globalized world, it’s easy to forget that behind all that data is a person.

Law firms have grappled for quite some time with the Gordian Knot that is the intersection of data protection laws and disclosure in all its forms. As the data privacy laws become more nuanced, and data breach becomes distressingly more commonplace, the advent of the GDPR (General Data Protection Regulation) has added another challenging layer to the intersection between data protection and disclosure. Although the GDPR was approved by the EU Parliament, its effects extend beyond the EEA (European Economic Area).

Record retrieval may seem like a small part of the litigation process, but because many records carry crucial evidence, choosing the right provider could mean the difference between winning and losing a case.

Record retrieval is critical. Thoroughly understanding HIPAA and HITECH requirements eliminates delays, pitfalls, and frustrations associated with retrieving sensitive information. All of us involved in claims and litigation have been known to be just a tad busy--to say the least. An average case contains nine separate providers from whom records must be gathered. In general, each record request takes about an hour to complete. So, finding time to brush up on HIPAA or HITECH, or even just learn best practices, takes time away from the actual retrieval, perhaps, even affecting the outcome of the case.

The digital age is not just upon us, it is here in full force. Cybersecurity is an issue that must stay top of mind as data breaches can affect any industry at any time. A recent study from the American Bar Association shows that one in every four law firms is a victim of a data breach, with those numbers steadily increasing. Since 2016, ABA has found that there has been an 8% increase in the number of respondents reporting that their firms had experienced a security breach at some point.