About

&

Compliance

Datum Structures LLC is a premier forensic data operations and digital infrastructure firm specializing in legally defensible e-discovery, secure IT asset disposition (ITAD), and end-to-end digital chain-of-custody management. We partner with law firms, healthcare networks, educational institutions, and government agencies to manage the full lifecycle of sensitive digital assets. From forensic data extraction to certified media destruction, our workflows are engineered to eliminate liability, ensure absolute evidentiary integrity, and maintain strict adherence to the highest echelon of federal, state, and regional regulatory frameworks.

I. Data Privacy & State Statutory Compliance (Illinois & Indiana)

We maintain strict adherence to the highly regulated privacy frameworks of the Midwest:

Illinois BIPA (Biometric Information Privacy Act): We ensure total compliance with 740 ILCS 14/, guaranteeing that any biometric data (fingerprints, facial geometry) encountered or processed during digital forensic investigations is handled with strict informed consent, securely retained, and permanently destroyed in accordance with BIPA’s rigid statutory timelines to prevent private right of action liabilities.

Illinois PIPA (Personal Information Protection Act): We execute secure data sanitization and breach prevention protocols that comply with 815 ILCS 530/, ensuring that sensitive Personal Information (PI) is rendered permanently unrecoverable, legally bypassing state breach-notification thresholds for disposed assets.

Illinois Data Security on State Computers Act (20 ILCS 450/): For our government contracts, we excute comprehensive wiping and physical sanitization of surplus state-owned electronics, ensuring zero data remains prior to hardware transfer or recycling.

Illinois State & Local Records Acts (5 ILCS 160/ & 50 ILCS 205/): We adhere strictly to statutory hold procedures and retention schedules, preventing the unauthorized or premature destruction of municipal and government digital records.

NCDPA (Indiana Consumer Data Protection Act): In full compliance with Indiana’s comprehensive privacy law (effective January 1, 2026), our data processing and erasure mechanisms support our enterprise clients' obligations to honor consumer data rights (Right to Know, Right to Control, Right to Delete).

Indiana Data Breach Notification Statute: We comply with Ind. Code § 24-4.9 by employing cryptographic erasure and NIST-compliant destruction to guarantee unencrypted personal information is never exposed during hardware lifecycle transitions.

II. Federal E-Discovery & Litigation Support

FRE (Federal Rules of Evidence) & FRCP: Our digital forensics workflows comply strictly with the Federal Rules of Evidence (specifically FRE 902(11) and 902(14) for self-authenticating electronic data, and Federal Rule of Civil Procedure 37(e) regarding spoliation. We maintain an unbroken, legally defensible Chain of Custody (CoC) to guarantee all extracted artifacts remain authentic and admissible in state and federal courts.

III. Healthcare & Protected Information

HIPAA & HITECH Act: As a technical service provider handling systems containing Protected Health Information (PHI and ePHI), Datum Structures adheres to the Health Insurance Portability and Accountability Act (HIPAA) Security and Privacy Rules, alongside the HITECH Act. We operate under audited Business Associate Agreements (BAAs), utilizing AES-256 encryption and NIST-compliant sanitization to prevent unauthorized disclosure.

Illinois GIPA (Genetic Information Privacy Act - 410 ILCS 513/): For healthcare and HR-related e-discovery, our workflows ensure absolute confidentiality and legal compliance regarding the extraction, handling, and sanitization of genetic testing data and family medical histories.

Illinois SOPPA (Student Online Personal Protection Act - 105 ILCS 85/): When servicing K-12 school districts, we guarantee that all student Personally Identifiable Information (PII) on legacy hardware is handled and destroyed under the strictest state educational data privacy guarantees.

IV. Defense, Federal & Law Enforcement Standards

NIST SP 800-88 Rev. 1 (Media Sanitization): Execution of federally certified Clear, Purge, and Destroy methodologies (including cryptographic erasure and physical disintegration), backed by verifiable, serial-number-tracked Certificates of Data Destruction (CDD).

NIST SP 800-86 (Digital Forensics): Application of standardized forensic techniques during evidence collection, imaging, and incident response.

NIST SP 800-171 & CMMC (Cybersecurity Maturity Model Certification): Internal cybersecurity posture aligned with Department of Defense (DoD) standards for safeguarding Controlled Unclassified Information (CUI).

CJIS (Criminal Justice Information Services): For operations involving municipal, state, or federal law enforcement datasets, our infrastructure aligns with FBI CJIS Security Policy standards to guarantee secure processing, transmission, and destruction of Criminal Justice Information (CJI).

SCA (McNamara-O’Hara Service Contract Act):We maintain full compliance with SCA regulations for federal and municipal contracts, strictly adhering to Department of Labor (DOL) prevailing Wage Determinations (WDs) and Health and Welfare (H&W) mandates to ensure continuous eligibility for public sector subcontracts.

V. Environmental & IT Asset Disposition (ITAD) Compliance

EPA RCRA (Resource Conservation and Recovery Act): Our hardware destruction and e-waste disposal pipelines comply with federal EPA standards, ensuring zero-landfill policies and preventing hazardous material liability for our clients.

R2v3 / e-Stewards Alignment: We adhere to the highest global standards for responsible IT asset disposition, ensuring that all physical data destruction is environmentally sustainable, ethically processed, and fully audited.9k