Privacy Alphabet Soup: Digesting SCCs, DPAs, TIAs, and More in a Post Schrems II World
Recorded On: 10/25/2022
- Registration Closed
Over the past year we have seen a host of changes in the global privacy landscape, including the newly published Standard Contractual Clauses (SCCs), Transfer Impact Assessment (TIA) changes, which permanently embed the Schrems II decision into data transfer analyses, and the rise of data localization requirements. Join us as we discuss these recent changes and how they impact the negotiation of security clauses and data protection addendums. Panelists will walk through a mock contract negotiation to point out potential pitfalls and solutions to common problems.
Due to the nature of its content, this on-demand program is not eligible for CLE/CPD credit.
Nick Holland
Partner
SHOOSMITHS LLP
Nick is an international data privacy lawyer with over 25 years’ experience, specialising in supporting multinationals on global privacy compliance programs. Formerly an in-house counsel for a US multinational, Nick helps companies on a wide range of global privacy projects and transactions involving BCR’s (EU and UK), cybersecurity incidents, audits, DSAR’s, privacy commercial transactions and is the global DPO for several multinational clients. More specifically Nick has worked on many large-scale data breach incidents across the world for many multinationals and liaises with regulators as part of those projects.
Nick frequently speaks at ACC conferences (most recently on Schrems at the Annual ACC conference in Las Vegas in October 2022), IAPP conferences and webinars as well as hosts various webinars on the Shoosmiths platform.
More specifically:
- Supporting a US recruitment provider on a multi-jurisdictional data incident involving regulatory filings in 15 countries
- Supporting an Indian IT company on a large data security breach in 10 countries
- Supporting several US multinationals on their global privacy programs as global DPO
- Supporting a large US multinational on its BCR application
- Supporting a global Brazilian multinational on its BCR application
- Supporting many companies on smaller scale data incidents involving regulatory filings in a few EMEA countries
- Supporting many US multinationals on the new EU SCC’s and TRA requirements and negotiations with vendors
- Supporting multinationals on OneTrust rollout programs
- Achieved first post GDPR Controller and Processor BCR for RGA, Inc
Rosemary Kuperberg
VP, Privacy and Deputy General Counsel
Demandbase, Inc.
I get it – privacy and legal compliance officers need to help the business succeed. Whether I am creating a global privacy infrastructure from scratch or negotiating a crucial multimillion-dollar contract, I work with business leaders to craft pragmatic solutions that optimize both the business and compliance needs.
When I worked in private practice I had a case where my client spent 10x the recovered judgment amount on legal fees. It was then that I decided to move in-house where I could have a greater impact in avoiding this kind of thing.
Since I moved in-house, my accomplishments have included:
► As Chief Privacy Officer and Data Protection Officer for Ellucian, a leading global higher education software and technology services company, I built a global privacy program from the ground up.
► At Ellucian, I also revamped and brought our export compliance program and the technology behind it up to current standards.
► At Verizon, I shaped the contract templates for computing/infrastructure as a service when it was brand new.
► Throughout my legal career I have negotiated some of the most significant contracts for my companies. For Ellucian, I negotiated 4 of the company’s largest agreements. At Deltek I negotiated a SaaS agreement that was the company’s largest at that time.
With multiple privacy certifications, including the highest certification available from IAPP, my professional qualifications are unparalleled. Highly regarded for my expertise, I am routinely sought out for speaking engagements and general advice among my peers.
Equally important, however, is my ability to listen to and understand my business clients’ issues before providing guidance or formulating an optimal response. I am able to communicate effectively with leadership and engineers alike, and have a reputation for being unflappable in high-pressure situations.
