The Data Chronicles

The role of a Data Protection Officer (DPO) has been well-known under data protection laws in Europe, currently under the EU GDPR, and prior to that, the EU Data Protection Directive. The role goes as far back as the 1970s, however, despite its established history, numerous questions continue to revolve around the responsibilities of a DPO. Scott Loughlin, co-lead of the Hogan Lovells Privacy and Cybersecurity practice, sits down with Hogan Lovells partner Christian Tinnefeld to discuss the ever-evolving role of a DPO and provide some practical tips for those serving in the function.

In this episode of The Data Chronicles, we delve into the emerging realm of cyber risk and liability and its connection to the False Claims Act. Join us as Scott Loughlin, co-lead of the Hogan Lovells Privacy and Cybersecurity practice, engages in a conversation with Hogan Lovells partner Mike Scheimer and counsel Stacy Hadeka. Together, they explore the implications when organizations holding government contracts face allegations of breaching their cybersecurity commitments. Discover why this is a vital concern, particularly for defense contractors, universities, and any entity providing products and services to the United States Government receiving CUI or subject to unique cybersecurity requirements such as CMMC.

Scott Loughlin: Contact

Mike Scheimer: Contact

Stacy Hadeka: Contact

The Federal Communications Commission (FCC) has proposed a voluntary cybersecurity labeling program to address unique cybersecurity concerns associated with the growing number of Internet of Things (IoT) devices. Against the backdrop of the FCC’s Notice of Proposed Rulemaking (NPRM), Scott Loughlin, co-lead of the Hogan Lovells Privacy and Cybersecurity practice, discusses with Hogan Lovells partners Ari Fitzgerald and Katy Milner the scope of the FCC’s proposed program (covering everything from mobile phones and computers to Internet-connected refrigerators, cars, and speakers) and how manufacturers of these devices should be thinking about the new requirements.

Scott Loughlin: Contact

Ari Fitzgerald: Contact

Katy Milner: Contact

In the second installment of our two-episode series, Scott Loughlin, co-lead of the Hogan Lovells Privacy and Cybersecurity practice, interviews Hogan Lovells litigation partner Vassi Iliadis and associate Laura Penaranda for an in-depth discussion on arbitration risks and class action waivers. They delve into the effects these provisions have on consumer-facing companies after a data security issue, resulting in an increase in arbitration demands due to clauses that are included in common terms of use contracts. The discussion provides an overview of arbitration risks, the impact of mass arbitration, and what companies should consider when revising their arbitration agreements.

Scott Loughlin: Contact

Vassi Iliadis: Contact

Laura Penaranda: Contact

This episode explores the recently adopted rules from the U.S. Securities and Exchange Commission (SEC) on cybersecurity disclosures for publicly traded companies.  Scott Loughlin, co-lead of the Hogan Lovells Privacy and Cybersecurity practice, chats with Hogan Lovells partners John Beckman, Allison Holt Ryan and Paul Otto as they uncover key elements of these rule changes, including enhanced disclosure requirements for certain cybersecurity incidents, cyber risk management expectations, and updated processes for cybersecurity oversight and reporting.

Scott Loughlin: Contact

John Beckman: Contact

Allison Holt Ryan: Contact

Paul Otto: Contact

In today's digital age, the challenges of cybersecurity are increasing and evolving. When a data breach happens, the legal aftermath can be both complex and costly.  In the first installment of a two part series, Scott Loughlin, co-lead of the Hogan Lovells Privacy and Cybersecurity practice, interviews Hogan Lovells litigation partner Allison Holt Ryan and counsel Adam Cooke as they discuss the ins and outs of data breach litigation, focusing on the current environment, a recent Fourth Circuit decision and its implications, and steps businesses can consider as they work to mitigate data breach litigation risk.

Scott Loughlin: Contact

Allison Holt Ryan: Contact

Adam Cooke: Contact

The European Commission’s adoption of its adequacy decision for the EU-U.S. Data Privacy Framework cleared the way for U.S.-based entities to certify their participation and begin importing EU personal data. In this second installment of a two-episode series, Scott Loughlin, co-lead of the Hogan Lovells Privacy and Cybersecurity practice, chats with U.S.-based colleagues, partner Bret Cohen, and senior associates Julian Flamant and Natalie Perez, to discuss the history of Trans-Atlantic data flows and unpack how U.S. importers can leverage the Framework.

Scott Loughlin: Contact

Bret Cohen: Contact

Julian Flamant: Contact

Natalie Perez: Contact

The explosive growth of direct-to-consumer health and wellness technologies that increase the amount of health data collected from consumers has triggered further action by [state legislators and] federal regulators. Scott Loughlin, co-lead of the Privacy and Cybersecurity practice, is joined by Hogan Lovells senior associate Alyssa Golay and associate Fleur Oké to discuss the proposed changes to the FTC’s Health Breach Notification Rule (HBNR), recent enforcement actions, regulator guidance, and what these actions mean for health and wellness technologies and their use of consumer data.

Scott Loughlin: Contact

Alyssa Golay: Contact

Fleur Oké: Contact

India will have a new comprehensive privacy law, which will shake up the data protection world in the region and require companies to rethink their global privacy compliance programs. In this episode, Scott Loughlin, co-lead of the Hogan Lovells Privacy and Cybersecurity practice is joined by Stephen Mathias, Partner and Co-Chair of the Technology Practice at Kochhar & Co, a leading law firm in India, to discuss the new law, which is named the Digital Personal Data Protection Bill 2023 (DPDPB). Scott and Stephen go into detail regarding the DPDPB’s areas of focus, how it compares to the GDPR, and what significant obligations and ramifications the bill has for global compliance programs and those who oversee them.

Scott Loughlin: Contact

In this episode, Scott Loughlin, co-lead of the Privacy and Cybersecurity practice, is joined by senior counsel and co-founder of the Hogan Lovells Privacy and Cybersecurity practice, Christopher Wolf, for a discussion the beginnings of privacy law. Chris details how he, along with other key originators, drove the creation of privacy as a distinct legal practice area. He provides great insight on the evolution of the industry, and more importantly, his forecast on where privacy is headed and what new attorneys or law students should know as they consider a focused practice in privacy.

Scott Loughlin: Contact

Christopher Wolf: Contact