A Close Look into DOJ and FTC’s Updates on Preserving Obligations for Collaboration Tools and Ephemeral Messaging

Collaboration tools may be the new water coolers of the digital age, but now even the most casual conversations can be listened to by the powers that be. As organizations increasingly rely on technology to streamline operations and foster teamwork, regulatory bodies like the Department of Justice (DOJ) and the Federal Trade Commission (FTC) are increasing pressure on businesses to ensure that even the quickest business-related communications are properly preserved. 

On January 26, 2024, significant updates to the language used in critical legal documents for civil and criminal matters were announced by the FTC and the Antitrust Division of the DOJ, marking an important shift in their focus. These updates emphasize the obligation for companies to preserve documents originating from collaboration platforms like Microsoft Teams and ephemeral messaging applications such as Signal. The revised language is set to be used in a range of critical legal documents, spanning preservation letters, voluntary access letters, and various forms of compulsory legal process documents, including grand jury subpoenas. 

While both agencies clarified that these updates serve to reinforce long standing obligations regarding document preservation during government investigations and litigation, the heightened emphasis on these specific types of information is a shot across the bow – signaling stricter enforcement and tougher sanction for violators.   

This blog will take a closer look at the technologies involved as well as the updated guidelines, exploring their implications for businesses. 

Understanding the DOJ and FTC 

The FTC and the DOJ are both federal agencies in the United States, but they have different roles and areas of focus. The FTC is primarily responsible for enforcing antitrust laws and protecting consumers from unfair or deceptive business practices. It investigates and takes action against companies engaged in anti-competitive behavior, such as price-fixing, monopolistic practices, or false advertising. The FTC also oversees consumer protection regulations and investigates issues related to privacy, data security, and advertising practices. It has authority over a wide range of industries, including retail, telecommunications, healthcare, and technology. 

The DOJ is the principal law enforcement agency of the federal government and is responsible for enforcing federal laws and representing the United States in legal matters. It is divided into several divisions and components, including the Antitrust Division, which focuses on enforcing antitrust laws to promote competition and prevent monopolies. In addition to antitrust enforcement, the DOJ investigates and prosecutes federal crimes, provides legal advice to the President and federal agencies, and defends the interests of the United States in court. The DOJ has broad jurisdiction over criminal and civil matters, covering a wide range of issues from national security to civil rights.  

So while both the FTC and the DOJ are involved in enforcing laws and regulations, the FTC primarily focuses on antitrust and consumer protection, while the DOJ has a broader mandate encompassing law enforcement and legal representation for the federal government. Together they are a formidable force, and their rules and guidelines need to be taken seriously by individuals and businesses alike.  

Which Technologies Are Being Highlighted? 

The new guidelines focus specifically on documents and records emerging from the use of online collaboration tools and ephemeral messages. What are these tools, and why are they so significant?  

Collaboration Tools 

Collaboration tools refer to software platforms and applications designed to facilitate communication and cooperation among individuals or teams within an organization. These tools provide a digital environment where users can share information, collaborate on projects, and communicate in real time regardless of geographic location. From instant messaging to project management software, collaboration tools offer a range of functionalities tailored to enhance productivity and streamline workflow. 

Several collaboration tools are widely adopted across various industries, each offering unique features to address specific needs and preferences. Common examples of such tools include Slack, Microsoft Teams, Google Workspace, Trello, Asana and more.  

Collaboration tools streamline communication by providing centralized platforms where team members can easily share information and work together and offer features like instant messaging, file sharing, task assignment, and document collaboration. Many collaboration tools offer integrations with other productivity applications, enhancing interoperability and enabling seamless collaboration across different tools and systems.  

Ephemeral Messaging 

Ephemeral messaging is a type of digital communication where messages, typically text, images, or videos, are automatically deleted after a predefined period, usually seconds or minutes, after being viewed or sent. This ephemeral nature distinguishes it from traditional messaging platforms where messages last indefinitely unless manually deleted by the user. Ephemeral messaging platforms often prioritize privacy and security, aiming to provide users with a sense of confidentiality and discretion in their communications. 

Ephemeral messaging has gained significant traction in modern communication because it offers users greater control over their digital footprint by automatically erasing messages, reducing the risk of sensitive information being stored or shared without consent.  

While ephemeral messaging offers several advantages, it also presents potential risks and challenges, including:  

• Data loss: Since ephemeral messages are automatically deleted, there is a risk of important information being lost if not captured or saved elsewhere. 
• Compliance concerns: In regulated industries where recordkeeping requirements apply, ephemeral messaging may pose challenges in terms of compliance with data retention and audit trail requirements. 
• Misuse and abuse: Ephemeral messaging can be exploited for nefarious purposes, such as cyberbullying, harassment, or disseminating illicit content, highlighting the need for robust moderation and content control measures. 

Ephemeral messaging applications and collaboration tools have become increasingly popular in recent years, particularly in business settings. This raises document preservation challenges for businesses, and concerns for regulators like the DOJ and FTC: Ensuring the retention and accessibility of electronic communications generated on these platforms is essential for regulatory compliance and legal proceedings. 

Updated Guidelines on Preserving Obligations 

The DOJ and the FTC recently introduced updated guidelines addressing the challenges posed by the proliferation of collaboration tools and ephemeral messaging platforms in business communication. These guidelines aim to ensure transparency, accountability, and compliance with legal and regulatory requirements when using these technologies. 

Companies are now required to adhere to specific obligations regarding the use of collaboration tools and ephemeral messaging platforms, including: 

• Recordkeeping requirements: Companies must establish and maintain policies for the retention and archiving of electronic communications and data exchanged through collaboration tools and ephemeral messaging platforms. This includes preserving messages, files, and other digital assets that may be relevant to business transactions, regulatory inquiries, or legal proceedings. 
• Compliance monitoring: Companies are tasked with implementing monitoring mechanisms to ensure compliance with recordkeeping policies and detect potential violations. This may involve using automated systems to track and archive electronic communications in real-time. 
• Employee training and awareness: Companies must educate employees about their obligations regarding the use of collaboration tools and ephemeral messaging platforms, including the importance of compliance with recordkeeping requirements and the potential consequences of non-compliance. 

Potential consequences for non-compliance with these rules 

Non-compliance with the updated rules can have serious consequences for companies. These include: 

• Legal and regulatory sanctions: Companies found to be in violation of recordkeeping requirements will face hefty fines, penalties, or legal action by the DOJ or FTC. 
• Reputational damage: Failure to comply with recordkeeping obligations can erode trust and credibility among stakeholders, including customers, investors, and business partners, leading to reputational harm and loss of goodwill. 
• Litigation risks: In the event of legal disputes or regulatory investigations, companies will be subject to adverse legal judgments or settlements if they cannot produce adequate electronic records or demonstrate compliance with recordkeeping requirements. 

Ensuring Compliance: Some Basic Steps 

To ensure compliance with the updated guidelines, businesses can adopt the following strategies: 

• Policy development: Develop comprehensive recordkeeping policies and procedures that outline the retention and archiving requirements for electronic communications and data generated through collaboration tools and ephemeral messaging platforms. 
• Employee training: Provide training and education to employees on their obligations regarding the use of these technologies and the importance of compliance with recordkeeping requirements. 
• Technology solutions: Invest in technology solutions and software tools that facilitate automated monitoring, capture, and retention of electronic communications, ensuring compliance with regulatory mandates. 
• Regular audits: Conduct regular audits and reviews of recordkeeping practices to identify gaps or deficiencies and implement corrective measures as necessary to maintain compliance. 

While compliance with regulatory requirements is paramount, businesses must also balance the need for efficiency and security in communication. This involves adopting technologies and practices that enable seamless collaboration while safeguarding sensitive information and maintaining data privacy. By leveraging encryption, access controls, and other security measures, businesses can ensure the integrity and confidentiality of electronic communications while meeting recordkeeping obligations effectively.  

LeapXpert: Your Partner in Full Communications Compliance 

The DoJ and FTC’s strict recordkeeping requirements challenge organizations to tighten their grip on communications compliance. The LeapXpert Communications Platform provides a secure and efficient way to manage the complex web of digital conversations that are key to your business operations. It maintains a complete record of all conversations between employees and clients, ensuring recordkeeping standards are met. Using a mobile-first approach, LeapXpert allows users to conduct text and voice conversations through clients’ preferred channels, all within a secure and unified environment.   

With LeapXpert, no communication is invisible. Businesses can maintain a comprehensive view and full visibility of employee-customer communication without capturing employees’ private and personal messages.     

The LeapXpert Communications Platform can also be easily integrated with leading third-party archiving, surveillance, and analytics platforms, making it an essential part of any compliance tech stack. Book now for a demo.