BarbriSFCourseDetails
  1. keyboard_arrow_leftBack

Course Details

Course Information
  • smart_display Format

    On-Demand

  • signal_cellular_alt Difficulty Level

  • work Practice Area

    Commercial Law

Date & Time
  • event Date

    Thursday, January 23, 2020

  • schedule Time

    1:00 p.m. ET./10:00 a.m. PT

  • timer Program Length

    90 minutes

Credit Information

  • This 90-minute webinar is eligible in most states for 1.5 CLE credits.

$297.00
CLE
ALL

This CLE course will give an update on the latest enforcement actions by European data protection authorities with the EU General Data Protection Regulation (GDPR) and provide the latest information on complying with the California Consumer Privacy Act (CCPA). The panel will discuss what lessons can be learned from GDPR enforcement actions and cases that can be used when updating your GDPR program, as well as look at the current position under the CCPA and how companies should be developing their CCPA programs.

Faculty

William Long
Partner
Sidley Austin LLP - Germany

Mr. Long advises international clients on a variety of social media, data protection, privacy, information security, e-commerce and other regulatory matters. He has experience with EU and international e-commerce, consumer, social media, data protection and payments projects, advising on e-commerce, consumer and social media regulation, data security and other data protection issues.

expand_circle_down Expand to View Full Bio expand_circle_up Collapse Bio
Diletta De Cicco
Attorney
Mayer Brown LLP

Ms. De Cicco’s practice focuses on privacy and cyber security. She advises clients regarding a wide range of global data privacy and security issues. She assists organizations in complying with EU and national privacy laws, including developing global data transfers mechanisms, privacy statements, data breach notification policies and procedures, etc. Ms. De Cicco regularly publishes articles on those matters and is a speaker on such topics.

expand_circle_down Expand to View Full Bio expand_circle_up Collapse Bio
Alexander B. Reynolds
Attorney
Davis Wright Tremaine LLP

Mr. Reynolds, CIPP/US, works collaboratively with clients to identify their privacy and security problems and creates holistic strategies to solve them. His legal expertise focuses on privacy and security compliance with international law, implementing privacy and security in contracts, and designing data-governance programs to respond to legal obligations.

expand_circle_down Expand to View Full Bio expand_circle_up Collapse Bio

Description

In the first year of GDPR over 200,000 GDPR cases were filed with European data protection authorities with over 90,000 data breach notifications. This has now resulted in numerous GDPR enforcement actions by data protection authorities across Europe with some fines announced to be in excess of $100 million. As well as applying to European businesses, the 2018 GDPR expanded the application of EU data protection law by requiring U.S. companies that maintain personal data on European citizens to comply with specific data protection requirements. According to a recent PwC survey, more than half of U.S. multinationals have identified the GDPR as their top data protection priority. Failure to comply with GDPR may cost businesses not only steep fines but also a significant risk to reputation and loss of customer goodwill.

Similarly, the implementation of the new CCPA, which goes into effect on Jan. 1, 2020, will impact companies both inside and outside California.

Counsel to European, international, and U.S. businesses and technology vendors must keep up to date with the developments on the GDPR and the CCPA to minimize business risks.

Listen as our authoritative panel explains recent GDPR enforcement actions and the critical requirements of the GDPR and CCPA. The panel will examine the steps companies and their counsel should take to deal with developing GDPR and CCPA requirements based on recent actions, case law, and the latest guidance.

Outline

  1. GDPR features
    1. Broader application
    2. Increased penalties
    3. Rights of data subjects
    4. Consent
    5. Breach notification
    6. Direct application to data processors
    7. Data protection authorities
    8. Cross-border data transfers
  2. Determining when GDPR applies to a U.S. company's practices
  3. CCPA
  4. Performing due diligence on existing technology-vendor agreements for compliance with new privacy laws
  5. Drafting new technology vendor contracts or amending existing contracts: language to include
  6. Recent fines and enforcement actions

Benefits

The panel will review these and other high priority issues:

  • Key enforcement actions under the GDPR
  • What can be learned from the GDPR cases that can be used when updating your GDPR program
  • Latest position on CCPA and what steps companies should be taking to comply with the CCPA