Drafting Vendor Agreements to Comply With EU GDPR: Steps to Take Now
TBD
Course Details
- smart_display Format
On-Demand
- signal_cellular_alt Difficulty Level
- work Practice Area
Commercial Law
- event Date
Thursday, January 31, 2019
- schedule Time
1:00 PM E.T.
- timer Program Length
90 minutes
-
This 90-minute webinar is eligible in most states for 1.5 CLE credits.
-
This CLE course will guide business and technology counsel for drafting or updating technology vendor agreements to meet the data protection and privacy requirements of the 2018 EU General Data Protection Regulation (GDPR). The panel will discuss how to determine whether the GDPR applies to a U.S. business, due diligence tactics for evaluating existing technology vendor agreements, and language that should be incorporated in contracts to ensure compliance.
The 2018 GDPR expands the application of EU data protection law by requiring U.S. companies that maintain personal data on European citizens to comply with certain data protection requirements. According to a recent PwC survey, more than half of U.S. multinationals have identified the GDPR as their top data protection priority. Failure to comply with GDPR may cost businesses not only steep fines, but also significant risk to reputation and loss of customer goodwill.
Counsel to U.S. businesses and technology vendors must also determine if their clients' vendor agreements are subject to the GDPR. If so, counsel should guide their clients in carefully evaluating and amending the contracts to ensure they are in line with the new data protection standards.
Counsel should especially strengthen the terms of the vendor agreements addressing liability and indemnity given the potentially significant sanctions for noncompliance with the GDPR.
Listen as our authoritative panel explains the critical requirements of the GDPR and steps companies and their counsel should take to ensure that their business practices and vendor contracts are compliant.
- GDPR features
- Broader application
- Increased penalties
- Rights of data subjects
- Consent
- Breach notification
- Direct application to data processors
- Data protection authorities
- Cross-border data transfers
- Determining when GDPR applies to a U.S. company's practices
- Performing due diligence on existing technology-vendor agreements for GDPR compliance
- Drafting new technology vendor contracts or amending existing contracts—language to include
The panel will review these and other high priority issues:
- Key features of the GDPR
- How to determine if a business is subject to the GDPR
- Steps companies and their counsel should take immediately to ensure technology vendor agreements comply with the GDPR
