12-Hour Program

See Credit Details Below

Overview

Twenty-Fourth Annual Institute on Privacy and Cybersecurity Law 

Data privacy and cybersecurity are among the most important issues for organizations today, as businesses are driven by data and digital assets. The Internet, artificial intelligence and machine learning, and evolving information technologies employ powerful tools for the collection, use, storage, and disposal of personal information. These data trends create a wide range of compliance risk and liability issues, while raising the stakes for protecting such data in increasingly challenging risk environments, ranging from internal vulnerabilities to criminal cyberattacks and other threats. Legislators, regulators, and courts are rapidly developing new laws and compliance obligations to address the privacy and cybersecurity implications of our expanding information economy and its continuously evolving risks. This annual conference focuses on the latest developments, coupled with strategic approaches, with the goal of keeping attorneys and other privacy and cybersecurity professionals informed and up-to-date and ready to respond effectively in this complex and dynamic area.

What You Will Learn 

After completing this program, participants will be able to: 

  • Identify what’s new regarding US privacy frameworks, from coast-to-coast and at the federal level
  • Apply lessons learned from recent FTC and state attorney general enforcement actions
  • Understand privacy considerations in the US and globally for employers monitoring and managing employees as they work-on-site, from home and everywhere in between
  • Know the latest developments beyond the US, including the EU General Data Protection Regulation, and compare trends in global data protection law developments
  • Recognize ethical and cyber-risk management issues in using information and technology
  • Keep up with cybersecurity challenges using a tabletop approach
  • Discuss strategies for minimizing AdTech risk
  • Define key components of implementing privacy and cybersecurity measures, drawing on the insights of CPOs and CISOs 

This program is designed for attorneys and professionals who provide advice on information data privacy and cybersecurity strategy, compliance, and risk management issues. This program will presume a general familiarity with privacy and data security issues and is intended for intermediate to advanced professionals looking to hone their skills.

Special Feature

  • Earn Continuing Privacy Education credit

Program Level: Overview

Prerequisites: An interest in privacy and cybersecurity issues.

Advanced Prep: None



Lecture Topics [Total time 00:13:45]

Segments with an asterisk (*) are available only with the purchase of the entire program.


  • Opening Remarks* [00:05:18]
    James G. Snell, Christine E. Lyon
  • U.S. Comprehensive State Privacy Laws: California, Virginia, Colorado, Utah and Connecticut [01:06:49]
    Lydia de la Torre, Stacey D. Schesser, James G. Snell, Stevie DeGroff
  • Beyond the Comprehensive State Privacy Laws – What’s Happening in Privacy and Data Security Law in the Rest of the US? [01:01:08]
    Lothar Determann, Michael Hamilton
  • The Enforcers: Latest Insights From Privacy and Data Security Regulators [01:16:24]
    Stacey D. Schesser, Christine E. Lyon, Benjamin Wiseman, Stevie DeGroff
  • EU and UK Privacy Developments: New Directions and New Challenges [01:01:02]
    Mark Webber, Stuart Lee, Sergio VeLarde
  • Managing Privacy and Security Developments in the Rest of the World [01:01:31]
    Hilary M. Wandall, Christine E. Lyon
  • Employee Privacy in the Era of Hybrid Work [01:00:39]
    Joanie Dillett, Margaret A. Keane
  • Ethical Issues for Privacy and Data Security Professionals [00:59:44]
    Kathryn Fritz, Merri A. Baldwin
  • AdTech – Getting a Handle on a Rapidly Changing Environment [01:01:40]
    David Wainberg, Meredith B. Halama
  • Preparing for the Inevitable: Managing a Cybersecurity Incident [01:15:55]
    Brian Lichter, Alex Iftimie, Elizabeth E. Davies, Elvis M. Chan
  • Litigation in Privacy and Data Security [01:01:20]
    Travis LeBlanc, Scott A. Kamber, Eric Goldman
  • Privacy and Cybersecurity: Governance, Oversight, and Third-Party Risk [00:59:35]
    Brock Dahl, Maureen A. Young, Flora J. Garcia
  • CPOs and CISOs: Getting Your Privacy and Cybersecurity House in Order [01:01:35]
    Ruby Zefo, Harvey Jang, Tyler J. Farrar, James G. Snell, Jim Higgins

The purchase price of this Web Program includes the following articles from the Course Handbook available online:


  • Complete Course Handbook
  • Elizabeth Canter and Andrew Longhi, Emerging Trends in U.S. Privacy Legislation (March 9, 2023)
    Elizabeth H. Canter
  • Lothar Determann and Jonathan Tam, The California Privacy Rights Act of 2020: A Broad and Complex Data Processing Regulation That Applies to Businesses Worldwide, Journal of Data Protection & Privacy, Vol. 4, No. 1, pp. 7–21 (December 8, 2020)
    Lothar Determann
  • No One Owns Data, Hastings Law Journal, Vol. 70:1 (December 2018)
    Lothar Determann
  • Adam Solomon and Anna Chan, Hunton Andrews Kurth LLP, Lawyer Insights, A Look at Cybersecurity’s Federal Legal Landscape (July 26, 2023)
    Aaron P. Simpson,Lisa J. Sotto
  • Hunton Andrews Kurth LLP, Privacy & Information Security Law Blog, Global Privacy and Cybersecurity Law Updates and Analysis, Update: Privacy and Cybersecurity
    Aaron P. Simpson,Lisa J. Sotto
  • Maneesha Mithal, Megan Kayo and Stacy Okoro, Wilson Sonsini, The WSGR Data Advisor, 2023 U.S. Cybersecurity Predictions (January 5, 2023)
    Maneesha Mithal
  • Maneesha Mithal and Rebecca Weitzel, Wilson Sonsini, The WSGR Data Advisor, 2023 U.S. Privacy Regulatory Predictions (January 5, 2023)
    Maneesha Mithal
  • Sheppard Mullin, Eye on Privacy Blog, Compilation of State Privacy Law Developments
    Liisa M. Thomas
  • The Enforcers: Latest Insights from Privacy and Data Security Regulators
    Christine E. Lyon
  • The Enforcers: Latest Insights from Privacy and Data Security Regulators
    Christine E. Lyon
  • Fieldfisher, Overview, EU and UK Privacy Developments: New SCCs, New Guidance, and New Directions in the UK (March 1, 2023)
    Mark Webber
  • Healthy Data Protection, Michigan Technology Law Review, Vol. 26, pp. 229–278 (Spring 2020)
    Lothar Determann
  • Lothar Determann and Michaela Nebel, International Association of Privacy Professionals (IAPP), The Privacy Advisor, Technology, Media and Telecommunications Services After ‘Schrems II’ (July 27, 2020)
    Lothar Determann
  • Managing Privacy and Data Security Developments in the Rest of the World: Regional Overviews (March 2023)
    Christine E. Lyon
  • Creating Balanced Management and Electronic Monitoring Strategies for Work-from-Home Employees (March 13, 2023)
    Peter J. Gillespie
  • Hunton Andrews Kurth LLP, Privacy & Information Security Law Blog, Global Privacy and Cybersecurity Law Updates and Analysis, Update: Workplace Privacy
    Aaron P. Simpson,Lisa J. Sotto
  • Daniel Butler and Kevin White, Hunton Andrews Kurth LLP, Lawyer Insights, AI Hiring Tools Could Draw Increased EEOC Scrutiny (October 13, 2021)
    Aaron P. Simpson,Lisa J. Sotto
  • Kevin White and Daniel Butler, Hunton Andrews Kurth LLP, Lawyer Insights, Avoiding Bias Risks in AI Hiring Technology (August 1, 2022)
    Aaron P. Simpson,Lisa J. Sotto
  • Paul Riermaier, Penn Carey Law, ChatGPT and the Law, ChatGPT and Other AI Technologies in the Study and Practice of Law (February 6, 2023)
    Kathryn J. Fritz
  • ETHICS, Our Ethics Duty to Read the News, Law Practice, American Bar Association (September/October 2021)
    Lucian T. Pera
  • ETHICS, A Privilege Case: Two Analogies, Two Morals
    Lucian T. Pera
  • Meredith Halama and Michael Sherling, Tracking the Past and Future of Interest-Based Advertising, Antitrust, Vol. 31, No. 3 (Summer 2017)
    Meredith Halama
  • Brian Lichter, Brian Resler and Heidi Wachs, Ch. 8: Incident Response, Practising Law Institute, Cybersecurity: A Practical Guide to the Law of Cyber Risk (December 2021)
    Brian Lichter
  • National Cybersecurity Strategy, The White House (March 2023)
    Alex Iftimie
  • U.S. National Cyber Investigative Joint Task Force, Ransomware: What It Is and What to Do About It
    Elvis M. Chan
  • Cybersecurity & Infrastructure Security Agency (CISA), Cybersecurity Incident & Vulnerability Response Playbooks: Operational Procedures for Planning and Conducting Cybersecurity Incident and Vulnerability Response Activities in FCEB Information Systems (November 2021)
    Alex Iftimie
  • U.S. Department of Justice, Federal Bureau of Investigation, Intellectual Property Protection
    Elvis M. Chan
  • U.S. Department of Justice, Federal Bureau of Investigation, Business E-mail Compromise (BEC)
    Elvis M. Chan
  • European Union Agency for Cybersecurity (ENISA), Enisa Threat Landscape 2022 (July 2021 to July 2022) (November 2022)
    Elizabeth E. Davies
  • National Cyber Security Centre, 10 Steps to Cyber Security
    Elizabeth E. Davies
  • Alex Iftimie and Robert S. Litt, Morrison Foerster, The Benefits and Risks of Notifying Law Enforcement (February 9, 2023)
    Alex Iftimie
  • U.S. Department of Justice, Cybersecurity Unit, Computer Crime & Intellectual Property Section, Criminal Division, Best Practices for Victim Response and Reporting of Cybersecurity Incidents (April 2015)
    Elvis M. Chan
  • Ransomware—Checklist of Technical Defenses
    Kimberly Kiefer Peretti
  • Kimberly Kiefer Peretti and Kate Hanniford, Alston & Bird LLP, Top 7 Issues All General Counsel Need to Know About Ransomware (May 14, 2021)
    Kimberly Kiefer Peretti
  • Kimberly Kiefer Peretti, Kellen Dwyer and Kristen Bartolotta, Alston & Bird LLP, CISA Issues Request for Information Prior to Required CIRCIA Rulemaking (September 13, 2022)
    Kimberly Kiefer Peretti
  • Kimberly Kiefer Peretti, Kate Hanniford, Ashley Miller and Lance Taubin, Alston & Bird LLP, NYDFS Releases Significant Enhancements to Its Cybersecurity Regulation in the Proposed Second Amendment (November 18, 2022)
    Kimberly Kiefer Peretti
  • Kellen Dwyer and Kimberly Kiefer Peretti, Alston & Bird LLP, Lessons from DOJ’s First Prosecution of a Company Executive Covering Up a Data Breach (October 10, 2022)
    Kimberly Kiefer Peretti
  • Kimberly Kiefer Peretti and Kristen Bartolotta, Alston & Bird LLP, FCC Proposes to Change Data Breach Reporting Rules for Telecommunication Companies (January 14, 2023)
    Kimberly Kiefer Peretti
  • FTI Consulting Journal, What to Say to Your Stakeholders When You’ve Been Hacked (Hint: Don’t Say ‘Hacked’) (July 29, 2022)
    Jamie Singer
  • FTI Consulting Insights, New Year’s Resolutions: Cybersecurity Preparedness for the Healthcare and Life Sciences Sector (January 19, 2023)
    Jamie Singer
  • Douglas H. Meal, Matthew D. LaBrie and Javier A. Silva, Evaluating the Enforceability of Class Action Waivers in Privacy and Cybersecurity Class Actions: Lessons from the Recent Caselaw (March 13, 2023)
    Douglas H. Meal
  • Alan Charles Raul, Lauren Kitces and Rimsha Syeda, Recent Developments That Impact Privacy and Data Security Litigation: Regulation Enforcement (March 6, 2023)
    Alan Charles Raul
  • Defending Data Privacy Class Action Litigation
    Ian C. Ballon
  • Legal Issues and a Checklist for Responding to Ransomware Attacks
    Ian C. Ballon
  • Defending Security Breach Class Action Litigation
    Ian C. Ballon
  • Kathryn Linsky, David P. Saunders and Jonathan Ende, McDermott Will & Emery LLP, The Next Frontier in Privacy Class Actions: Video Players, Session Replay and Chatbots (December 21, 2022)
    David P. Saunders
  • David P. Saunders et al., McDermott Will & Emery LLP, Justices Knowingly Interpret BIPA to Include ‘Annihilative,’ ‘Punitive’ and ‘Crippling Liability’ for Illinois Businesses (February 17, 2023)
    David P. Saunders
  • Privacy and Cybersecurity: Governance, Oversight and Third-Party Risk (March 14, 2023)
    Maureen A. Young
  • Considerations for Data-Rich Contracting
    Flora J. Garcia
  • SEC Proposes Cybersecurity Disclosure Rules (March 12, 2022)
    Brock Dahl
  • Miriam H. Wugmeister and Whitney Lee, Privacy and Cybersecurity: Governance, Oversight and Third-Party Risk (March 6, 2023)
    Miriam H. Wugmeister
  • Gerard M. Stegmaier and Courtney E. Fisher, Caveat Director: Things May Not Always Be What They Seem in the Court Room, Server Room and Board Room—Analyzing Cybersecurity Challenges in Corporate Governance, a 2023 Update
    Gerard M. Stegmaier
  • Hunton Andrews Kurth LLP, Privacy Shield Redux: Looking Ahead to a New EU-U.S. Data Transfer Framework (December 7, 2022)
    Aaron P. Simpson,Lisa J. Sotto
  • Adam Solomon and Anna Chan, Hunton Andrews Kurth LLP, Lawyer Insights, Wawa Data Breach Is Warning on Swipe Payment Tech Risks (September 19, 2022)
    Aaron P. Simpson,Lisa J. Sotto

Presentation Material


  • U.S. Comprehensive State Privacy Laws
    Lydia de la Torre, Stevie DeGroff, Stacey D. Schesser, James G. Snell
  • Beyond the Comprehensive State Privacy Laws – What’s Happening in Privacy and Data Security Law in the Rest of the US?
    Lothar Determann, Michael Hamilton
  • The Enforcers: Latest Insights From Privacy and Data Security Regulators
    Stevie DeGroff, Christine E. Lyon, Stacey D. Schesser, Benjamin Wiseman
  • EU and UK Privacy Developments: New Directions and New Challenges
    Stuart Lee, Sergio VeLarde, Mark Webber
  • Managing Privacy and Security Developments in the Rest of the World
    Christine E. Lyon, Hilary M. Wandall
  • Employee Privacy and the 2023 Hybrid Workplace
    Joanie Dillett, Margaret A. Keane
  • ETHICAL ISSUES FOR PRIVACY AND DATA SECURITY PROFESSIONALS
    Merri A. Baldwin, Kathryn Fritz
  • Ad Tech: Getting a Handle on a Rapidly Changing Environment
    Meredith B. Halama, David Wainberg
  • Preparing for the Inevitable: Managing a Cybersecurity Incident
    Elvis M. Chan, Elizabeth E. Davies, Alex Iftimie, Brian Lichter
  • PRIVACY AND CYBERSECURITY: GOVERNANCE, OVERSIGHT AND THIRD-PARTY RISK
    Brock Dahl, Flora J. Garcia, Maureen A. Young
  • CPOs and CISOs: Getting Your Privacy and Cybersecurity House in Order
    Tyler J. Farrar, Jim Higgins, Harvey Jang, James G. Snell, Ruby Zefo

Why You Should Attend

Data privacy and cybersecurity are among the most important issues for organizations today, as businesses are driven by data and digital assets. The Internet, artificial intelligence and machine learning, and evolving information technologies employ powerful tools for the collection, use, storage, and disposal of personal information. These data trends create a wide range of compliance risk and liability issues, while raising the stakes for protecting such data in increasingly challenging risk environments, ranging from internal vulnerabilities to criminal cyberattacks and other threats. Legislators, regulators, and courts are rapidly developing new laws and compliance obligations to address the privacy and cybersecurity implications of our expanding information economy and its continuously evolving risks. This annual conference focuses on the latest developments, coupled with strategic approaches, with the goal of keeping attorneys and other privacy and cybersecurity professionals informed and up-to-date and ready to respond effectively in this complex and dynamic area.

What You Will Learn 

After completing this program, participants will be able to: 

  • Identify what’s new regarding US privacy frameworks, from coast-to-coast and at the federal level
  • Apply lessons learned from recent FTC and state attorney general enforcement actions
  • Understand privacy considerations in the US and globally for employers monitoring and managing employees as they work-on-site, from home and everywhere in between
  • Know the latest developments beyond the US, including the EU General Data Protection Regulation, and compare trends in global data protection law developments
  • Recognize ethical and cyber-risk management issues in using information and technology
  • Keep up with cybersecurity challenges using a tabletop approach
  • Discuss strategies for minimizing AdTech risk
  • Define key components of implementing privacy and cybersecurity measures, drawing on the insights of CPOs and CISOs

Who Should Attend

This program is designed for attorneys and professionals who provide advice on information data privacy and cybersecurity strategy, compliance, and risk management issues. This program will presume a general familiarity with privacy and data security issues and is intended for intermediate to advanced professionals looking to hone their skills.

Special Feature

  • Earn Continuing Privacy Education credit

Program Level: Overview

Prerequisites: An interest in privacy and cybersecurity issues.

Advanced Prep: None

Credit Details