ACC NCR Privacy Forum and Potomac Law Group: Cybersecurity and Privacy Issue-Spotting in Vendor Agreements

Companies entrust their most confidential and valuable information with a wide range of vendors, including cloud services, marketing firms, and back-office service providers.  These services can expose companies to an increasing level of risk under the expanding list of cybersecurity, data protection, and privacy laws, including Europe’s General Data Protection Regulation and the California Consumer Privacy Act.  Many of these laws impose specific contractual provisions that companies must include in contracts with vendors who handle customer data.

This program will examine the most important – and often thorniest – cybersecurity, privacy, and data protection issues that in-house counsel will encounter when negotiating contracts with vendors.  Participants will come away with an understanding of the laws that govern these contractual provisions, and best practices for negotiating cybersecurity and privacy terms with service providers.