Data Protection in Practice: Managing Vendor Contracts and Incidents, and Mitigating Risks (Dec. 8 2025)

Includes a Live Web Event on 12/08/2025 at 12:00 PM (EST)

As organizations increasingly rely on third-party technology providers, managing privacy and security risks through contracts is more critical than ever. This webinar will explore the intersection of data protection and technology contracting, offering practical insights into contract provisions (including indemnification and security incident notification obligations), managing vendor-related incidents, and risk mitigation strategies. Our presenters will provide real examples of lessons learned and outline some of the biggest considerations as we look ahead to 2026.

Generously Sponsored by King and Spalding LLP

This live program offers free CLE in select jurisdictions for members of ACC. Please see details below!

CLE/CPD CREDIT IS AVAILABLE IN THE FOLLOWING JURISDICTIONS:

*Alaska, *Arizona, California, *Connecticut, Georgia, *Hawaii, Illinois, Minnesota, Missouri, *Montana, *New Hampshire, *New Jersey, *New York, *North Dakota, Ohio, Pennsylvania,Tennessee, Texas, and Washington. 

*Indicates that CLE/CPD credit is available by virtue of reciprocity with another jurisdiction.

ACC WILL MAKE AN APPLICATION FOR CLE UPON REQUEST IN THE FOLLOWING JURISDICTIONS:

Arkansas, Colorado, Delaware, Kansas, Louisiana, New Mexico, South Carolina, and Vermont.

Requests must be made one week prior to the scheduled program date to ensure timely application submission. Please use the form below to submit your request for CLE.

CLICK HERE TO ACCESS THE FORM!

ATTENDEES MUST SELF-FILE IN THE FOLLOWING JURISDICTIONS (A CERTIFICATE WILL BE PROVIDED TO ASSIST YOUR FILING EFFORTS):

Alabama, Florida, Idaho, Indiana, Iowa, Kentucky, Maine, Mississippi, Nebraska, Nevada, North Carolina, Oklahoma, Oregon, Puerto Rico, Rhode Island, Utah, West Virginia, Wisconsin, and Wyoming.

CLE/CPD IS NOT MANDATORY IN THE FOLLOWING JURISDICTIONS:

District of Columbia, Maryland, Massachusetts, Michigan, South Dakota

Key:

Complete

Failed

Available

Locked

Data Protection in Practice: Managing Vendor Contracts and Incidents, and Mitigating Risks

12/08/2025 at 12:00 PM (EST) | 60 minutes

You must register to access.

Program Feedback Form

7 Questions

You must register to access.

First CLE Verification Code

Enter code to continue.

You must register to access.

Second CLE Verification Code

Enter code to continue.

You must register to access.

Certificate Claim Area

US States: CA, GA, IL, MN, MO, NC, OH, PA, TN, TX, and WA

Up to 1.20 CLE credits available | Certificate available

Up to 1.20 CLE credits available | Certificate available ACC has filed directly with the following states: California, Georgia, Illinois, Minnesota, Missouri, North Carolina, Ohio, Pennsylvania, Tennessee, Texas, and Washington. Please select you state and enter your bar number to have your certificate generate fully.

You must register to access.

US States: AK, AZ, CT, HI, MT, NH, NJ, NY, ND

Up to 1.20 CLE credits available | Certificate available

Up to 1.20 CLE credits available | Certificate available ACC uses interstate reciprocity rules to grant credit in the following states: Alaska, Arizona, Connecticut, Hawaii, Montana, New Hampshire, New Jersey, New York, North Dakota. Please select you state and enter your bar number to have your certificate generate fully.

You must register to access.

US States: AL, CO, FL, ID, IA, IN, KY, ME, MS, NE, NV, OK, OR, PR, RI, SC, UT, WV, WI, and WY.

Up to 1.20 CLE credits available | Certificate available

Up to 1.20 CLE credits available | Certificate available ACC has not made an application for credit in the following states: Alabama, Colorado, Florida, Idaho, Iowa, Indiana, Kentucky, Maine, Mississippi, Nebraska, Nevada, Oklahoma, Oregon, Puerto Rico, Rhode Island, Utah, West Virginia, Wisconsin, and Wyoming. The certificate provided here is to aid your personal application for credit to your state regulator.

You must register to access.

Phyllis Sumner

Partner, Data, Privacy and Security

King and Spalding

https://www.linkedin.com/in/ph...

Phyllis B. Sumner is a Partner in King & Spalding's Atlanta office and the firm's Chief Privacy Officer. She leads the firm's Data, Privacy and Security Practice and regularly counsels corporate boards, senior executives and other clients on cybersecurity preparedness, emergency response, remediation, compliance, internal and regulatory enforcement investigations, and data breach and privacy litigation.

She is a crisis manager and trial lawyer, who works with her clients' legal, compliance and business teams to strategize, manage and defend when significant privacy and security issues arise. She has assisted clients with their response to and management of hundreds of data security incidents and has represented clients defending against class actions and regulator investigations in some of the largest and most high-profile data security incidents.

A nationwide top ranked Privacy & Data Security lawyer by Chambers USA, Phyllis’ clients note “Her knowledge and expertise when it comes to ransomware incident response is second to none.” Phyllis is a recognized leader in the industry and consistently named to Cybersecurity Docket’s annual list of “best and brightest Incident Response attorneys,” including the 2023 and 2024 Global Incident Response Top 50. Three-time Law360 MVP, she also has earned recognition as a Daily Report’s “Distinguished Leader,” Atlanta Magazine’s "Women Making a Mark," and as one of Global Data Review’s “Women in Data,” and she is listed in the Best Lawyers of America for her high caliber work in privacy and data security law.

She served as an Assistant U.S. Attorney for eight years, first for the Northern District of Illinois and then for the Northern District of Georgia, prosecuting high-profile cases such as Eric Rudolph, the Centennial Olympic Park bomber.