Upcoming Events
Meet the Team
Kwaku A. Akowuah
Washington, D.C.
Data Matters Privacy Blog
Sheila A.G. Armbrust
San Francisco
Data Matters Privacy Blog
Francesca Blythe
London
Data Matters Privacy Blog
Colleen Theresa Brown
Washington, D.C.
Data Matters Privacy Blog
Thomas D. Cunningham
Chicago
Data Matters Privacy Blog
Sharon R. Flanagan
San Francisco, Palo Alto
Data Matters Privacy Blog
David A. Gordon
Chicago
Data Matters Privacy Blog
Tomoki Ishiara
Tokyo
Data Matters Privacy Blog
Amy P. Lally
Century City
Data Matters Privacy Blog
David C. Lashway
Washington, D.C.
Data Matters Privacy Blog
William RM Long
London
Data Matters Privacy Blog
Joan M. Loughnane
New York
Data Matters Privacy Blog
Geeta Malhotra
Chicago
Data Matters Privacy Blog
Rollin A. Ransom
Los Angeles
Data Matters Privacy Blog
Alan Charles Raul
Washington, D.C., New York
Data Matters Privacy Blog
Jennifer B. Seale
Washington, D.C.
Data Matters Privacy Blog
Yuet Ming Tham
Singapore, Hong Kong
Data Matters Privacy Blog
Jonathan M. Wilan
Washington, D.C.
Data Matters Privacy Blog
John W. Woods Jr.
Washington, D.C.
Data Matters Privacy Blog
Sidley Adds Partners Seale and Wilan to Growing Cybersecurity Practice
WASHINGTON, D.C. –Sidley announced today that Jennifer Seale and Jonathan Wilan have joined as partners in the firm’s Privacy and Cybersecurity practice in Washington, D.C. Ms. Seale and Mr. Wilan join Sidley from Baker McKenzie where they played key roles in the Global Cybersecurity practice. (more…)
Data Matters Contributors
sidleyprivacyblog@sidley.com
Reflecting on the UK Inaugural DaTA Conference: Top Five Trends to Watch as Global Regulators Step up Enforcement in Digital Markets
Last week, the UK Competition and Markets Authority (CMA) hosted its inaugural Data, Technology, and Analytics (DaTA) Conference.
The CMA DaTa Conference has been hailed as a milestone as it convened for the first time regulators, data scientists, engineers, tech companies, and academics to discuss evolving challenges in digital markets. The conference coincided with London Tech Week, during which Chris Philp, UK Minister for Tech and the Digital Economy, unveiled a new UK Digital Strategy: the UK government’s vision for regulating digital markets, involving a monitoring framework and outcomes-focused regulation. The government has opened a public consultation, and stakeholders have until September 5, 2022, to offer their views on the proposed approach.
Against this background, here is our selection of the top five trends that stood out over the course of the CMA DaTa Conference. (more…)
Ken Daly
Brussels
kdaly@sidley.com
Patrick J. Harrison
London
pharrison@sidley.com
William RM Long
London
wlong@sidley.com
Monika Zdzieborska
London
mzdzieborska@sidley.com
Bethany Wise
London
bwise@sidley.com
SEC Requests Comment on Regulation of Information Providers Under the U.S. Investment Advisers Act
On June 15, 2022, the U.S. Securities and Exchange Commission (Commission) issued a request for comment with respect to whether certain index, model, pricing, and other information providers should be regulated as investment advisers under the Investment Advisers Act of 1940. The Commission suggests fresh consideration is needed in light of changes in technology and market practices in the decades since these topics were last given significant attention — especially given the continuing expansion of index-based investment strategies. Responses to the request for comment are due the later of August 16, 2022, or 30 days after publication of the release in the Federal Register. (more…)
Ranah Esmaili
Washington, D.C.
resmaili@sidley.com
Jay G. Baris
New York
jbaris@sidley.com
Nathan J. Greene
New York
ngreene@sidley.com
W. Hardy Callcott
San Francisco
wcallcott@sidley.com
Elizabeth Shea Fries
Boston
efries@sidley.com
Laurin Blumenthal Kleiman
Chuck Daly
New York, Boston
cdaly@sidley.com
Kentucky and Maryland Recently Joined Other States in Adopting NAIC Model Data Security Law
Kentucky and Maryland recently continued the trend of state insurance departments adopting some version of the National Association of Insurance Commissioners’ (“NAIC”) Insurance Data Security Model Law. Kentucky Governor Andy Beshear signed House Bill 474 into law, and Maryland Governor Larry Hogan signed SB 207. (more…)
Thomas D. Cunningham
Chicago
tcunningham@sidley.com
Stephen W. McInerney
Chicago
smcinerney@sidley.com
Connecticut Makes Five: The Constitution State Enacts Broad Data Privacy Law Effective July 2023
Connecticut has passed a new state data privacy law slated to go into effect on July 1, 2023. The law largely tracks other new state data privacy laws recently passed in Virginia and Colorado, but also includes several provisions that could impact compliance plans, including a new obligation to provide a mechanism for consumers to revoke their consent to the processing of their data. (more…)
Colleen Theresa Brown
Washington, D.C.
cbrown@sidley.com
Alan Charles Raul
Washington, D.C., New York
araul@sidley.com
Sheri Porath Rockwell
Century City
sheri.rockwell@sidley.com
Sean Royall
Suits Against Google Signal Increased ‘Dark Patterns’ Scrutiny
*This article first appeared on Law360 on June 16, 2022
Pending lawsuits against Google LLC illustrate how regulators and plaintiffs lawyers are increasingly wielding a dark patterns theory in challenging companies’ practices involving consumers.
The attorneys general of Washington, D.C., Washington state, Texas and Indiana all filed complaints against Google, alleging that the company tricks consumers into providing their location data, on Jan. 24. (more…)
Michele L. Aronson
Washington, D.C.
maronson@sidley.com
Colleen Theresa Brown
Washington, D.C.
cbrown@sidley.com
Benjamin M. Mundel
Washington, D.C.
bmundel@sidley.com
Spotlight on Women in Privacy – Hattie Davison
Hattie Davison, UK Government, Department for Digital, Culture, Media and Sport, Head of Data Reform Policy (more…)
Data Matters Contributors
sidleyprivacyblog@sidley.com
Understanding China’s Data Regulatory Regime: China Solicits Public Comments on Certification Rules for Cross-Border Data Processing Activities
Certification by a professional institution is one of the mechanisms permitted under China’s Personal Information Protection Law (PIPL) to legitimize cross-border transfers of personal information. Other permitted mechanisms include governmental security review and standard contractual clauses to be issued by the Chinese government. However, to date, there have been no clear rules on the criteria and procedures for obtaining the PIPL certification. (more…)
Lei Li
Beijing, Shanghai
lei.li@sidley.com
Lianying Wang
Beijing
lianying.wang@sidley.com