Privacy Policy Fundamentals: Purpose, Key Components, Real World Examples, Evolving Legal Landscape
Course Details
- smart_display Format
On-Demand
- signal_cellular_alt Difficulty Level
Beginner
- work Practice Area
Cybersecurity and Data Privacy
- event Date
Wednesday, March 12, 2025
- schedule Time
1:00 p.m. ET./10:00 a.m. PT
- timer Program Length
90 minutes
-
This 90-minute webinar is eligible in most states for 1.5 CLE credits.
This CLE webinar will discuss the importance and legal requirements for organizations to have privacy policies in place. The panel will explain what a privacy policy is and isn't, outline the purpose and key components of an effective privacy policy, and provide examples of common terms and tips for maintaining policies under the ever-evolving legal framework.
Mr. Austin advises clients on breach response, data privacy, information security, and regulatory compliance related to domestic and international privacy laws and regulations, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Virginia Consumer Data Protection Act (VCDPA), and the Health Insurance Portability and Accountability Act (HIPAA). He is a Certified Information Privacy Professional with expertise in both U.S. and European law (CIPP/US & CIPP/E) by the International Association of Privacy Professionals (IAPP).
Ms. Nadro advises clients on cybersecurity and data privacy matters. A Certified Information Privacy Professional (CIPP/US), she helps clients navigate various data security and privacy issues. Ms. Nadro assists clients with policy drafting, program management, and data collection. She also advises clients on best practices for compliance with evolving state, federal, and international data protection laws. Ms. Nadro is a frequent writer and speaker on data security and privacy issues for organizations such as the ABA’s Tort Trial and Insurance Practice Section’s Cybersecurity and Data Privacy Committee, the Illinois Institute of Continuing Legal Education, and the American Bankruptcy Institute. She is also a member of the International Association of Privacy Professionals, the world’s largest information privacy organization.
Privacy policies are everywhere. They serve many purposes and come in many different forms. A privacy policy is an external-facing legally binding document that protects consumers from predatory data collection practices. An effective policy also protects the company collecting the data by clearly defining how they collect, store, and use customer data, which can mitigate the potential for legal risks relating to mishandling of personal information or privacy violations.
There are state, federal, and international laws requiring organizations that collect personal information to have privacy policies in place. Generally, an effective policy should contain a description of the information the company collects and how it is collected, the company's reason for collecting the data, how the data will be used and protected, whether the data is shared with third parties, the consumer's rights and choices regarding the collection, use and sharing of their data, and the amount of time the data is retained and how it is deleted. Other information may be required depending on the company's industry, type of personal data collected, and the website's target audience.
The most common and preferred privacy policy form is a clickwrap agreement. With a clickwrap privacy policy users actively acknowledge and agree to an organization's data collection and usage practices. Because the user's consent is recorded, a clickwrap agreement is considered more enforceable and legally compliant than the more passive browsewrap agreement.
Listen as our authoritative panel breaks down the key components of a privacy policy and provides guidance for drafting and reviewing these agreements.
- Overview: the evolution and legal requirements regarding privacy policies
- What a privacy policy is and isn't
- Purpose of a privacy policy
- Key components of a privacy policy
- Clickwrap vs. browsewrap policies
- Updating and managing privacy policies
- Practitioner pointers and key takeaways
The panel will review these and other key considerations:
- What are the current laws and regulations requiring privacy policies?
- What is the purpose of a privacy policy?
- What are the key components of a privacy policy?
- Why are clickwrap privacy policies more legally enforceable than browsewrap policies?
