Data Protection in Practice: Managing Vendor Contracts and Incidents, and Mitigating Risks (On-Demand)
Recorded On: 12/08/2025
-
Register
- Non-member - $80
- Member - Free!
- *Further discounts may apply once you log in.
As organizations increasingly rely on third-party technology providers, managing privacy and security risks through contracts is more critical than ever. This webinar will explore the intersection of data protection and technology contracting, offering practical insights into contract provisions (including indemnification and security incident notification obligations), managing vendor-related incidents, and risk mitigation strategies. Our presenters will provide real examples of lessons learned and outline some of the biggest considerations as we look ahead to 2026.
Generously Sponsored by King and Spalding LLP

This program originally aired on December 8, 2025. Please note that the on-demand format of this program is not eligible for CLE/CPD credit.
Key:
Phyllis Sumner
Partner, Data, Privacy and Security
King and Spalding
https://www.linkedin.com/in/ph...
Phyllis B. Sumner is a Partner in King & Spalding's Atlanta office and the firm's Chief Privacy Officer. She leads the firm's Data, Privacy and Security Practice and regularly counsels corporate boards, senior executives and other clients on cybersecurity preparedness, emergency response, remediation, compliance, internal and regulatory enforcement investigations, and data breach and privacy litigation.
She is a crisis manager and trial lawyer, who works with her clients' legal, compliance and business teams to strategize, manage and defend when significant privacy and security issues arise. She has assisted clients with their response to and management of hundreds of data security incidents and has represented clients defending against class actions and regulator investigations in some of the largest and most high-profile data security incidents.
A nationwide top ranked Privacy & Data Security lawyer by Chambers USA, Phyllis’ clients note “Her knowledge and expertise when it comes to ransomware incident response is second to none.” Phyllis is a recognized leader in the industry and consistently named to Cybersecurity Docket’s annual list of “best and brightest Incident Response attorneys,” including the 2023 and 2024 Global Incident Response Top 50. Three-time Law360 MVP, she also has earned recognition as a Daily Report’s “Distinguished Leader,” Atlanta Magazine’s "Women Making a Mark," and as one of Global Data Review’s “Women in Data,” and she is listed in the Best Lawyers of America for her high caliber work in privacy and data security law.
She served as an Assistant U.S. Attorney for eight years, first for the Northern District of Illinois and then for the Northern District of Georgia, prosecuting high-profile cases such as Eric Rudolph, the Centennial Olympic Park bomber.
Brooke Achua
Senior Counsel and Procurement Manager
Atria Health and Research Institute
Margo Lynn Hablutzel
Associate General Counsel
Gainwell Technologies LLC
Margo Lynn Hablutzel is Associate General Counsel for Gainwell Technologies LLC and its associated companies worldwide. Prior to joining Gainwell she worked at companies including Nortel, Mary Kay Inc., ACS, Computer Sciences Corporation, and DXC Technology. Current responsibilities include global technology transactions, drafting and negotiation a wide variety of other agreements and overseeing teams of contract managers, intellectual property management, outside counsel oversight, project management, internal training, a seat on the AI Policy Board, and “other duties as assigned”. In addition to the Association of Corporate Counsel she is active in the Illinois State Bar Association, and in the past held leadership roles in the Chicago Bar Association, the American Bar Association, and the International Trademarks Association, as well as writing articles for the Dallas Bar Journal. Margo Lynn is a frequent writer and speaker on topics including intellectual property, AI, and cybersecurity for both legal and layperson organizations, most recently “Negotiating in the Metaverse” for the Journal of Strategic Contracting and Negotiation (JSCAN) AI issue. She holds a BA from University of Chicago; JD from Chicago-Kent College of Law; LLM in Intellectual Property Law from John Marshall Law School; and is a Certified Information Systems Security Professional through ISC2.