With a rapidly digitizing world and with constant threats on cyber security with information theft, ownership of data and data permissioning will increasingly become a topic of focus, and evolving and new regulations are needed. For now, it is the role of the plan fiduciary to take prudent steps in addressing the level and type of use of such data by service providers.
Please see our commentary comparing the Vanderbilt Settlement with the Northwestern Dismissal.