Communication
Legal Notification Checklist
Framework for legal engagement during security incidents, including privilege considerations.
Communication · intermediate · Ongoing
Checklist for engaging legal counsel and managing legal aspects of incident response.
Steps
5
01
Initial Legal Notification
Engage legal counsel early.
- Notify in-house legal immediately
- Engage outside counsel if warranted
- Discuss privilege protections
- Document that investigation is at counsel direction
02
Regulatory Assessment
Assess notification requirements.
- Identify applicable regulations
- Determine notification timelines
- Identify responsible regulatory bodies
- Draft notification templates
03
Privilege Maintenance
Protect privileged communications.
- Mark documents as privileged appropriately
- Limit distribution of privileged materials
- Ensure forensic reports are at counsel direction
- Document privilege chain
04
Notification Execution
Execute required notifications.
- File regulatory notifications by deadline
- Send customer notifications if required
- Document all notifications sent
- Track notification acknowledgments
05
Documentation
Maintain legal documentation.
- Document all legal decisions
- Preserve notification records
- Maintain privilege log
- Store securely for potential litigation
Checklist
- In-house legal notified
- Outside counsel engaged (if needed)
- Privilege protections established
- Applicable regulations identified
- Notification deadlines documented
- Notification templates drafted
- Notifications sent by deadline
- Customer notifications sent (if required)
- Notifications acknowledged and tracked
- Documentation preserved
Evidence
- Legal engagement records
- Regulatory assessment
- Notification copies
- Acknowledgment records
- Privilege log