Courses

Understanding the CCPA and What Lies Ahead

This session provides a practical overview of the California Consumer Privacy Act (CCPA), including its significant expansion under the California Privacy Rights Act (CPRA), covering key amendments such as changes to covered businesses, the broadened definition of personal data, and the role of the newly established California Privacy Protection Agency (CPPA). Attendees will come away with a clearer understanding of how these developments affect their organizations and what to anticipate as the regulatory landscape continues to evolve.

The Comprehensive Guide to the GDPR

This three-part webinar series provides a structured overview of the EU's General Data Protection Regulation (GDPR), covering its key terms, territorial scope, seven core principles, data subject rights, controller and processor obligations, enforcement penalties, and the role of ENISA in supporting compliance. The series also examines recent GDPR class action cases and their implications for organizations conducting business internationally or handling data stored in the EU.

Legal Issues to Consider at the Board Level​: Cybersecurity and Data Privacy

This two-part seminar walks board members, legal advisors, and technology executives through the legal, regulatory, and practical dimensions of cybersecurity governance, including fiduciary duties, SEC regulatory requirements, and cyber risk assessment frameworks. Panelists cover the key questions boards should be asking and the action points they should prioritize to meet regulatory expectations and strengthen their overall risk management posture.

Cheat Sheet: The State of Cybersecurity and Privacy Regulatory Oversight

This course provides an overview of three key U.S. cybersecurity and privacy frameworks—the FTC's privacy and security rulemaking, the New York Department of Financial Services cybersecurity regulation, and the California Consumer Privacy Act—helping organizations and their advisors understand the core requirements each imposes. It offers a practical reference for navigating a fragmented regulatory landscape where federal, state, and sector-specific rules can overlap or conflict.

Attorney Rulebook: FTC Privacy and Security Rulemaking

This course examines how the Federal Trade Commission uses its rulemaking and enforcement authority to address data privacy, security, and commercial surveillance, using the Advance Notice of Proposed Rulemaking (ANPR) for a Trade Regulation Rule on Commercial Surveillance and Data Security as a practical case study. Participants will come away with a clearer understanding of the FTC's regulatory process, potential implementation challenges, and relevant case law that may shape future outcomes.

Across the Pond: AI Regulatory Efforts in the U.S. and the E.U.

This course compares how the U.S. and E.U. are approaching AI regulation, contrasting the U.S. focus on encouraging innovation with the E.U.'s risk-tiered, ethics-centered Artificial Intelligence Act, and examines what those differences mean for organizations operating across both jurisdictions. It covers foundational AI and generative AI concepts alongside an overview of each regulatory framework, helping professionals across legal, security, insurance, and executive functions understand the evolving compliance landscape.

Daniel B. Garrie

The State of Cybersecurity and Privacy Regulatory Oversight

Without a single federal law in place, U.S. cybersecurity and privacy compliance is shaped by a shifting mix of regulations that organizations across industries must navigate. This course surveys three significant regulatory frameworks—the FTC's privacy and security rulemaking, the New York Department of Financial Services cybersecurity regulation, and the California Consumer Privacy Act (as amended by the CPRA)—covering key requirements, regulatory priorities, and how to assess which obligations apply to your organization or clients.

Acronym Soup: CCPA 2023 Year in Review

Panelists walk through the California Consumer Privacy Act, the rights it provides to California residents, and how the CPRA amendment broadened the definition of personal data and shifted rulemaking authority. The session then reviews key 2023 developments and outlines expectations for 2024, including updates on the delayed enforcement timeline.

Daniel B. Garrie

2023 Year in Review: The State and Impact of the GDPR

Panelists provide an overview of the GDPR, its scope, and key exceptions, then walk through 2023 developments including the EU's shift toward centralized enforcement, how penalties are determined, and notable fines such as the record action against Meta. The session closes with a look at what organizations can expect going forward and practical guidance for compliance.

Daniel B. Garrie

Navigating HIPAA: Guide to the Privacy Rule

Panelists explain what HIPAA covers, which organizations it applies to, and what information it protects or excludes, then walk through the Privacy Rule's permitted uses and disclosures and review proposed rule changes along with their practical implications for healthcare organizations.

Daniel B. Garrie

GDPR: Are You Liable?

This seminar explains how the GDPR applies to American organizations that handle EU personal data, covering the roles of Data Controllers and Data Processors, how cross-border data transfers are regulated, and what liability businesses face for non-compliance, including real enforcement examples and a look at where enforcement trends are heading.

Daniel B. Garrie

Understanding the Right of Publicity in a Technology-Driven World

This seminar covers the right of publicity—an individual's control over commercial use of their name and likeness—with a focus on California and New York statutes, how it differs from other intellectual property rights, and how technologies such as deepfakes, social media, and data breaches are shaping its application. Participants will also review recent notable cases and practical steps for protecting individuals against unauthorized commercial use of their identity.

Daniel B. Garrie

Navigating the CCPA: The Privacy Pioneer

This seminar covers the California Consumer Privacy Act, including the consumer rights it established, how the 2022 CPRA amendments expanded its scope and definitions, the role of the California Privacy Protection Agency, and anticipated 2023 developments, with practical guidance for organizations managing compliance across an evolving multi-state privacy landscape.

Daniel B. Garrie

Pioneer: New York DFS Cybersecurity Regulations

This seminar covers the New York Department of Financial Services cybersecurity regulation (23 NYCRR 500), one of the first of its kind in the U.S., including its six regulatory minimum standards and the role of the NYDFS. Panelists also discuss the amendments proposed in late 2022 that would introduce additional policy, technical, and leadership requirements for covered organizations.

Daniel B. Garrie

Cybersecurity Issues in Healthcare: Threats and Regulations (Part 2 of 2)

Part 2 of a two-part series examining cybersecurity in the healthcare sector, this session covers the five titles of HIPAA, including the Privacy and Security Rule, proposed amendments, the enforcement rule, and violations. It concludes with a breakdown of the HITRUST Common Security Framework (CSF).

Daniel B. Garrie