Strengthen Data Privacy Compliance: The who, what, why, where, and how of data processing agreements

Beth Waller | Woods Rogers Vandeventer Black

As chair of the Cybersecurity & Data Privacy practice at Woods Rogers Vandeventer Black (WRVB), Beth’s practice is fully devoted to cybersecurity and data privacy. Clients ranging from local government and state agencies to mid-market firms and Fortune 200 companies depend on Beth for advice and counsel. Beth’s credentials in the field are extensive. She is a certified Privacy Law Specialist by the International Association of Privacy Professionals (IAPP), which is accredited by the American Bar Association. In addition, she is a Certified Information Privacy Professional with expertise in both U.S. and European law (CIPP/US & CIPP/E) and a Certified Information Privacy Manager (CIPM), also from the IAPP.

In 2022, the Governor of Virginia appointed Beth to the Commonwealth of Virginia’s first Cybersecurity Planning Committee, a committee tasked with increasing the cybersecurity posture of public bodies and local governments in Virginia. Beth writes extensively for OneTrust Data Guidance on the nuances of Virginia’s new data privacy law as a OneTrust Data Privacy Expert. Beth is also a frequent contributor to the national cybersecurity journal Dark Reading, where she writes about the intersection of law, privacy, cybersecurity, and technology.

I. Review the role of the contracting party under data privacy laws, moving beyond the lingo of controller / processor and into the practical aspects of why the “who” of data processing matters for compliance | 2:00pm – 2:30pm

II. This session will examine “what” and “where” a data processing agreement may be required | 2:30pm – 3:00pm

Break | 3:00pm – 3:10pm

III. Finally, we will touch on “why” and “how” these agreements can be negotiated to protect your organization not only from a regulator’s review but also in a breach of contract scenario, looking at indemnification, limitation of liability, and the building blocks of a defensible position under privacy law | 3:10pm – 3:40pm