Apr 42018

Sidley’s Fourth Annual Privacy and Cybersecurity Roundtable

Data Matters Contributors
, , , , , , , , , ,

Sidley hosted the firm’s fourth annual Privacy and Cybersecurity Roundtable in the DC office on Monday, March 26, 2018.

Following an introduction by Sidley partner Alan Raul,  Giovanni Buttarelli, European Data Protection Supervisor, and Helen Dixon, Data Protection Commissioner for Ireland, discussed the EU General Data Protection Regulation which will go into effect on May 25, 2018. Both Helen Dixon and Giovanni Buttarelli shared their insights on preparation for, and life after May 25. Following their remarks, Sidley Partner and Privacy practice Co-Leader, Ed McNicholas (D.C.) moderated a lively discussion that included Cam Kerry, Senior Counsel (D.C./Boston) and new Sidley Partner, Wim Nauwelaerts (Brussels).

The second panel explored the future of privacy and cybersecurity enforcement, particularly the FTC’s domestic and international agenda, emerging privacy and cybersecurity regulatory regimes, and the national security implications of privacy and cybersecurity enforcement. Speakers included Maneesha Mithal, the FTC’s Associate Director, Division of Privacy and Identity Protection, Bureau of Consumer Protection, and Julie Brill, Microsoft’s Vice President and Deputy General Counsel for Privacy and Regulatory Affairs, and former Commissioner of the U.S. Federal Trade Commission (FTC). Several members of the firm’s Privacy and Cybersecurity practice also contributed to the insightful discussion, including former FTC Chairman and Sidley Senior Counsel, Tim Muris (D.C.), and former Deputy Assistant and Deputy Counsel to President Obama, Legal Adviser to the National Security Council (NSC), and new Sidley Partner, Chris Fonzone (D.C.). The panel was moderated by Sidley Partner, Colleen Brown (D.C).

The event was followed by a networking reception featuring a Taste of “Adequacy” and “Essentially Equivalent” Wines and Spirits.  The menu was inspired by the locations designated as adequate by the EU for purposes of transfers of personal data and highlighted:

ANDORRA: Escudillo Stew Chicken, veal, meatballs, sausage, potatoes, cabbage, white beans, pasta shells in a tomato ragout

FAEROE ISLANDS: Dry Aged Lamb Broth Radish, seaweed, potatoes, rutabaga

ISRAEL: Falafel Traditional hummus, shawarma & pita bread

ISLE OF MAN: Queenies & Herring Queen scallops on the half shell Smoked herring served with vintage cheddar & chili spice

JERSEY: Chicken Savoy Roasted chicken with a garlic, cheese, herb & vinegar rub

SWITZERLAND: Fondue, Papet Vaudois, Offal Sauté Gruyere fondue & accoutrement Papet Vaudois – classic preparation of sausage, leeks & potatoes Offal Sauté – sweetbreads in a creamy mushroom gravy

URUGUAY: Beef Asado & Savory Churros Asado spiced BBQ Cheese stuffed churros with dipping sauce

DESSERT SELECTION

CANADA: Strawberry Rhubarb Pie

GUERNSEY: Gâche Melée Traditional baked apple dessert

BAR SELECTION

ARGENTINA: Malbec wine

NEW ZEALAND: Sauvignon Blanc Wine

UNITED STATES (through Privacy Shield): Maker’s Mark Bourbon, Green Hat Gin, Tito’s Vodka

Data Matters Contributors

sidleyprivacyblog@sidley.com

You might also like
UK Sets Out It’s “Pro-Innovation” Approach To AI Regulation

On 29 March 2023, the UK’s Department for Science Innovation and Technology (“DSIT”) published its long awaited White Paper on its “pro-innovation approach to AI regulation” (the “White Paper”), along with a corresponding impact assessment. The White Paper builds on the “proportionate, light touch and forward-looking” approach to AI regulation set out in the policy paper published in July 2022. Importantly, the UK has decided to take a different approach to regulating AI compared to the EU, opting for a decentralised sector-specific approach, with no new legislation expected at this time. Instead, the UK will regulate AI primarily through sector-specific, principles based guidance and existing laws, with an emphasis on an agile and innovation-friendly approach. This is in significant contrast to the EU’s proposed AI Act which is a standalone piece of horizontal legislation regulating all AI systems, irrespective of industry.

How the China Personal Information Protection Law Applies to Foreign Asset Managers

Since China’s Personal Information Protection Law (PIPL) came into effect in November 2021, there has been widespread uncertainty amongst offshore fund managers and investors with entities outside Mainland China as to how and whether the regime applies to them. Given the potential for foreign asset managers to overlook or misinterpret PIPL, this brief update outlines some guidance as to how PIPL can apply, and to whom, in a practical context.

EU Moving Closer to an AI Act – Key Areas of Impact for Life Sciences/MedTech Companies

The European Union is moving closer to adopting the first major legislation to horizontally regulate artificial intelligence. Today, the European Parliament (Parliament) reached a provisional agreement on its internal position on the draft Artificial Intelligence Regulation (AI Act). The text will be adopted by Parliament committees in the coming weeks and by the Parliament plenary in June. The plenary adoption will trigger the next legislative step of trilogue negotiations with the European Council to agree on a final text. Once adopted, according to the text, the AI Act will become applicable 24 months after its entry into force (or 36 months according to the Council’s position), which is currently expected in the second half of 2025, at the earliest.