The Data Chronicles

In the post-Dobbs era, concerns have arisen regarding the potential for organizations or governments to gather data from smartphones, revealing information about individuals' visits to medical facilities. Join host Scott Loughlin in this episode as he delves into the pressing issue of geofencing with Hogan Lovells associate, Paige Papandrea. Together, they navigate through the landscape of emerging state laws concerning health privacy and explore the jurisdictions where these laws are emerging, and provide insights into the implications these new requirements hold for organizations navigating the intricacies of health data privacy.

Several states have passed consumer health privacy laws that include unique obligations for a wide array of health-related data. In this episode, host Scott Loughlin is joined by counsel Donald DePass and associate Paige Papandrea to discuss the background of these laws, what requirements and trends are in motion, and the challenges that await.

Navigating the intricacies around the secondary use of research data in the European Union (EU) can be daunting. Building upon a previous episode on this subject under U.S. law, in this episode we delve into the EU regulatory landscape governing data usage in research. Scott Loughlin is joined by Partner, Patrice Navarro, to unravel the complexities, shedding light on the nuanced rules governing data collection and its secondary use for research.

Companies are excited about AI and the many benefits it can offer. Meanwhile, the many risks are real and legal teams are looking for ways to manage them. What’s the answer? It starts with AI governance, and that’s the focus of this episode of the Data Chronicles podcast. Host Scott Loughlin is joined by Kimberly Zink, a privacy professional with a long history in leading privacy, data governance and, now, AI teams. Together, they explore how businesses and their legal advisors can transition from merely assessing risks to actively addressing them at scale, including the establishment of the right internal infrastructure and processes to make responsible and risk-based use of AI.

With more than 30 African countries adopting data protection legal frameworks and the rapid development of privacy laws in the Middle East,  organizations operating in the Middle East and African (MEA) region need to understand their obligations and compliance risks. On this episode of the Data Chronicles, host Scott Loughlin is joined by Senior Associate, Aissatou Sylla, to discuss the general overview for the data protection laws in place in the MEA region, highlight the key privacy considerations and obligations and spotlight enforcement trends for each jurisdiction with respect to consent, direct marketing, DPA registration, data transfers, localization, sensitive data, children's data, breach notification requirements, and more.

Addressing zero-day security vulnerabilities requires fast work. In this 10-minute episode, we highlight a newly announced vulnerability in Ivanti's Connect Secure VPN software that has the government and cyber professionals concerned. Since recording on 15 January 2024, this dynamic threat has rapidly evolved. Professionals report the potential for multiple waves of attempted exploitation. The Data Chronicles is here to help and provide you what you need to know to take action. Host Scott Loughlin is joined by Charles Carmakal, Chief Technology Officer at Mandiant, a prominent cybersecurity firm to discuss the vulnerability, the nature of the threat and immediate mitigation steps.

Did you miss our analysis of the comprehensive New Jersey consumer privacy bill? If you prefer a quick podcast discussion, we have that too. Join Scott Loughlin, co-lead of the Privacy and Cybersecurity practice, and Hogan Lovells associate Harsimar Dhanoa in a quick reaction episode of The Data Chronicles. They discuss the bill, what’s new, what’s the same, what’s different and what you need to know.

Researchers and sponsors often want to use data from research studies for research not necessarily contemplated in the protocol or informed consent from the study. Scott Loughlin, co-lead of the Privacy and Cybersecurity practice, is joined by counsel Melissa Levine to discuss the complex interaction of U.S. federal and state research and privacy laws that affect the secondary use of research data. They tackle what organizations should consider when evaluating whether to proceed with a secondary research use, the compliance considerations, and approaches to obtaining consent for secondary use from the start of the study and ways to mitigate risk when the consent obtained does not cover the intended secondary uses.

In the final episode of season 1, Scott Loughlin and Eduardo Ustaran, co-leads of the Privacy and Cybersecurity practice discuss their privacy and cybersecurity predictions for 2024 in the EU and US. Among trending topics such as generative AI and automated decision-making, they touch on the use of technology for employee monitoring, the evolution of international data transfers, the intersection of data security and antitrust, and cybersecurity vulnerabilities in the supply chain. Scott and Eduardo share their forecast on enforcement trends, sensitive data, and privacy and cybersecurity litigation, arising from the delayed discovery of how the internet works.

Novel in design and comprehensive in scope, the Digital Services Act is a major reform package that will regulate all online intermediary businesses offering services to EU users starting in 2024. In this episode, Scott Loughlin, co-lead of the Privacy and Cybersecurity practice, is joined by partner Anthonia Ghalamkarizadeh to discuss the new compliance obligations online marketplaces, social media sites, app stores, search engines, and other services hosting and/or disseminating user generated / third party content will be made subject to. They discuss what digital platforms should know as the law matures and starts to take a more broad effect on data regulation in Europe.