Negotiating Data Privacy and Security Terms (August 26, 2025)
- Registration Closed
For in-house counsel, navigating the intricate landscape of data privacy and security is paramount to mitigating risk across all business operations – from vendor and data licensing agreements to product launches and beyond. Faced with an ever-increasing global patchwork of data privacy and security laws, this second installment will provide a high-level review of the applicable laws essential for drafting robust data privacy and security-related agreements and terms. Attendees will walk away equipped with practical drafting guidance for key terms related to data use, information security, incident notification, indemnification, and limitation of liability.
Generously Sponsored by Blank Rome

This live program offers free CLE in select jurisdictions for members of ACC. Please see details below!
CLE/CPD CREDIT IS AVAILABLE IN THE FOLLOWING JURISDICTIONS:
*Alaska, *Arizona, California, *Connecticut, Georgia, *Hawaii, Illinois, Minnesota, Missouri, *Montana, *New Hampshire, *New Jersey, *New York, *North Dakota, Ohio, Pennsylvania,Tennessee, Texas, and Washington.
*Indicates that CLE/CPD credit is available by virtue of reciprocity with another jurisdiction.
ACC WILL MAKE AN APPLICATION FOR CLE UPON REQUEST IN THE FOLLOWING JURISDICTIONS:
Arkansas, Colorado, Delaware, Kansas, Louisiana, New Mexico, South Carolina, and Vermont.
Requests must be made one week prior to the scheduled program date to ensure timely application submission. Please use the form below to submit your request for CLE.
CLICK HERE TO ACCESS THE FORM!
ATTENDEES MUST SELF-FILE IN THE FOLLOWING JURISDICTIONS (A CERTIFICATE WILL BE PROVIDED TO ASSIST YOUR FILING EFFORTS):
Alabama, Florida, Idaho, Indiana, Iowa, Kentucky, Maine, Mississippi, Nebraska, Nevada, North Carolina, Oklahoma, Oregon, Puerto Rico, Rhode Island, Utah, West Virginia, Wisconsin, and Wyoming.
CLE/CPD IS NOT MANDATORY IN THE FOLLOWING JURISDICTIONS:
District of Columbia, Maryland, Massachusetts, Michigan, South Dakota
Key:






Alex Nisenbaum
Partner
Blank Rome
Alex advises clients on data privacy and information security laws and regulations, including compliance with HIPAA/HITECH; Gramm-Leach-Bliley; the California Consumer Privacy Act; cross-border data transfer; and state privacy, data protection, and breach notification requirements. Alex is able to synthesize the patchwork of state and federal legal requirements to assist clients in bringing innovative products to market and operationalize compliance programs that are in line with their business goals. He is certified as an information privacy professional by the International Association of Privacy Professionals.
He handles technology and data privacy and security matters in a variety of industries, including healthcare, FinTech, financial services, pharmaceutical, medical device, consumer goods, e-commerce, and manufacturing. He also regularly handles strategic information technology (“IT”) transactions covering diverse critical business functions, including agreements involving cloud services and software licensing, software and mobile application development, IT and business process outsourcing, hardware acquisition, telecommunications, data licensing, and professional services.
Sharon Klein
Partner
Blank Rome
Sharon advises businesses on assessing and mitigating risks related to the privacy and security of personal data, ownership, and commercialization of data artificial intelligence; planning, drafting, and implementing privacy, security, and data protection policies and “best practices”; compliance with global, federal, and state privacy and security laws, regulations, and rules; data governance; and breach response, crisis management, and remedies for non-compliance. She is certified as an information privacy professional by the International Association of Privacy Professionals.
Sharon has deep experience in negotiating and drafting complex technology and cloud transactions, licensing, and strategic IT and commercial agreements. She is active in many organizations involved in technology, data privacy and security, and health information. For example, Sharon is a member of a U.S. Department of Health and Human Services task force that is addressing aligning healthcare industry security approaches to responding to cybersecurity threats under the Cybersecurity Information Sharing Act of 2015. She also is a commissioner of the Electronic Healthcare Network Accreditation Commission, a voluntary, self-governing standards development organization established to develop standard criteria and accredit organizations that electronically exchange health care data.
Sharon brings more than 35 years’ experience to Blank Rome, advising clients on data privacy, cybersecurity, and complex technology transactions. Her acumen in data privacy stems from her significant experience executing outsourcing and technology contracts, but also from the 12 years she spent as associate general counsel at Siemens Medical Solutions USA where she notably focused on operationalizing healthcare and life science regulations, including HIPAA/HITECH and the Common Rule in research.
Outside the Firm
Sharon enjoys dinners with her historian husband and her high-school age son. The two cats sometimes make an appearance.