Continuing Education Information Sheet

• Describe the FTC and its enforcement authority over privacy and security
• Explain the GLBA Safeguarding Rule and the FTC's enforcement role
• Outline the FTC rulemaking process and the commercial surveillance ANPR
• Analyze recent cases shaping the FTC's rulemaking authority

Intended audience: Attorneys advising on corporate risk management who need command of FTC privacy and data-security regulation.

Level: advanced

Prerequisites: None

• Daniel B. Garrie, Founder, Law & Forensics; Neutral at JAMS; Faculty at Harvard

  Law & Forensics LLC · JAMS · Harvard · Rutgers Law School · Journal of Law & Cyber Warfare

  Daniel B. Garrie is the founder and executive managing partner of Law & Forensics LLC, a boutique cybersecurity and forensic engineering firm he co-founded in 2008. He serves as a neutral, arbitrator, and forensic special master at JAMS, focusing on cybersecurity, cryptocurrency, and complex technology disputes, and holds faculty appointments at Harvard and Rutgers Law School. A patented software inventor and prolific author, he is editor-in-chief of the Journal of Law & Cyber Warfare and a widely cited authority on computer forensics, eDiscovery, and cyber litigation.

• Aaron Tantleff, Partner, Foley & Lardner LLP

  Foley & Lardner LLP

  Aaron K. Tantleff is a partner at Foley & Lardner LLP in Chicago, in the firm's Technology Transactions, Cybersecurity, and Privacy practice. He advises companies on privacy, data security and information management, including compliance policies and programs, cybersecurity breach preparation and incident response, technology licensing and outsourcing transactions. Before joining Foley he was global director of intellectual property at a NASDAQ-listed information technology and software company and acting associate general counsel at an NYSE-listed global information technology and management consulting company; he also teaches transactional intellectual property law as an adjunct professor at Loyola University Chicago School of Law. He holds a J.D. from Chicago-Kent College of Law and the CIPP/E certification. At Legal Cyber Academy, Aaron Tantleff teaches on the FTC, privacy, and data surveillance.

• Tarique Collins, Chief Legal Officer, Click Therapeutics, Inc.

  Click Therapeutics, Inc.

  Tarique Collins is Chief Legal Officer at Click Therapeutics, Inc. He brings more than 18 years of strategic legal leadership across the healthcare, technology and biotech sectors, working on risk management and regulatory compliance under frameworks including HIPAA, GDPR, NIST, SOC 2 and ISO 27001, and has overseen collaboration, investment and financing deals exceeding $800 million. He holds a J.D. from the University of Pennsylvania Law School and a bachelor's degree, summa cum laude, from Benedict College, along with a certificate in business and public policy from the Wharton School and an executive education certificate in cybersecurity from the Harvard Kennedy School, and is a Certified Information Privacy Professional (CIPP/US) and Certified Information Privacy Manager (CIPM). At Legal Cyber Academy he teaches on FTC privacy and data surveillance oversight and the CCPA.

• Tammy Klotz, Chief Information Security Officer, Trinseo

  Tammy Klotz has been chief information security officer of the specialty materials company Trinseo since October 2023, where she leads cybersecurity across the company's 24 manufacturing sites and 11 R&D facilities. She spent more than two decades in IT before moving into cybersecurity leadership in 2016, and has since served as CISO for three manufacturing companies: Versum Materials, Covanta — where she was later promoted to chief technology officer — and Trinseo. Her earlier career was at Air Products and Chemicals, where she was a global IT leader and head of IT audit over a tenure of more than 20 years. She holds the CISM, CISSP and CRISC certifications, wrote Leading with Empathy and Grace: Secrets to Developing High-Performing Teams (2024), and has served as president of the Lehigh Valley chapter of the Cloud Security Alliance. At Legal Cyber Academy she teaches on the FTC, privacy and data surveillance.

• Stewart Baker, Founder, Stewart Baker Consulting PLLC (formerly Partner, Steptoe & Johnson LLP)

  Stewart A. Baker was a technology, national security and privacy lawyer who practiced for much of his career at Steptoe & Johnson LLP in Washington, D.C., and later founded Stewart Baker Consulting PLLC. He served as General Counsel of the National Security Agency from 1992 to 1994 and as the first Assistant Secretary for Policy at the U.S. Department of Homeland Security from 2005 to 2009, and worked on encryption, surveillance and cybersecurity policy. He wrote The Limits of Trust: Cryptography, Governments, and Electronic Commerce (1998) and Skating on Stilts: Why We Aren't Stopping Tomorrow's Terrorism (2010), and hosted the Cyberlaw Podcast, which he started in 2013. He clerked for Justice John Paul Stevens and held a J.D. from UCLA School of Law and a B.A. from Brown University. He died on 30 April 2026. At Legal Cyber Academy he taught on the FTC, privacy and data surveillance.

Legal Cyber Academy is not an accredited provider; the notes below explain how a learner may self-submitthis activity where their board permits. The pathways shown reflect this course’s subject matter. Always confirm your board’s current rules.

• CLE (attorneys)up to 1.0 hr (60-min basis)

  Many U.S. jurisdictions let an attorney apply for CLE credit for a non-accredited program (often called individual attorney or self-application). Use this certificate plus the course Information Sheet as your supporting documentation. Your state bar or CLE board decides whether credit is granted, how much, and any self-study cap.

• CE / CPD (privacy, insurance, IT)up to 1.0 hr (60-min basis)

  Where your professional body recognizes self-reported or self-directed learning (CPD) — for example many privacy (CIPP/CIPM) and security certifications — record this activity using the certificate and Information Sheet. Confirm your program's self-reporting rules and any documentation it requires.