Regulators increasingly are scrutinizing employee use of personal devices and third-party messaging apps. This article summarizes the DOJ’s recent guidance and the SEC’s enforcement trends and priorities in this area, and it provides information governance best practices companies can implement now to ensure they are meeting regulators’ expectations and recordkeeping rules.