In-House Counsel Roundtable: Multistate Privacy Compliance Made Simple & Cheaper

By now, we’ve all probably heard the phrase “The Privacy Patchwork.” There are 19 state privacy laws - maybe 20 or 21 or more - depending upon how you count. Plus, we have a growing list of specialized sensitive data laws in areas such as children’s data. It’s enough to make you stop, literally, and do nothing about trying to comply with privacy compliance because, how could you even start?

But what if you took a closer look at that “patchwork,” close enough to see that it’s all cut from the same cloth? What if you saw that those 19 (or more) laws weren’t just similar but overlapped by 90%, 95%, or even in many cases 100%. What if instead of getting overwhelmed you could find the repeating patterns that would let you draft a workable plan to manage recurring requirements across the laws while still picking out the unique “high bars.”

Our discussion for this roundtable will cover – with questions sought and answered throughout:

• How the regulators have told us that doing nothing is the last thing you should do;
• Recognizing the consistent requirements for notices, consumer rights, consent, processor contracting and data processing impact assessments;
• Crossing the big divide: the unique opt-in and notice requirements of California;
• Finding the high bars that will test your compliance scheme; and
• What to do where the pattern is still being set in sensitive data areas like children’s data and geolocation.

NOTE: There are no written materials for this program. The content of this program does not meet requirements for continuing legal education (CLE) accreditation. All recordings and materials from this program and previous programs are available for free for ABA members and can be found on the ABA Business Law Section website.