Privacy and Data Protection – Information Technology

Overview

We focus our work for the IT industry on technology transactions, in addition to our usual comprehensive range of privacy and data protection services. We handle vendor contracts, mergers and acquisitions, and agreements involving the ownership, usage, transfer, and sharing of data, as well as a significant number of cloud computing deals for enterprise purchasers and cloud service providers. Our clients include: Web, software, and app developers; social game publishers; companies involved in the cloud, SaaS, platform usage, data analytics, network security solutions, advertising technologies and payment processing: and companies involved in Website, mobile app, and video game development.

Select Experience

  • Conducting due diligence and negotiating more than 150 cloud computing transactions on behalf of both cloud service providers and enterprise purchasers, including Software as Service (SaaS), Platform as a Service (PaaS), and Infrastructure as a Service (IaaS).
  • Developing contract programs for technology service providers, including their master services agreement as well as a framework for negotiating revisions with their customers.
  • Providing guidelines to clients in assessing cloud computing risks, including indemnification and limits of liability.
  • Developing and assessing Service Level Agreements (SLAs) in various settings, addressing issues such as business interruption and customer service.
More »

Experience

  • Conducting due diligence and negotiating more than 150 cloud computing transactions on behalf of both cloud service providers and enterprise purchasers, including Software as Service (SaaS), Platform as a Service (PaaS), and Infrastructure as a Service (IaaS).
  • Developing contract programs for technology service providers, including their master services agreement as well as a framework for negotiating revisions with their customers.
  • Providing guidelines to clients in assessing cloud computing risks, including indemnification and limits of liability.
  • Developing and assessing Service Level Agreements (SLAs) in various settings, addressing issues such as business interruption and customer service.
  • Facilitating the development and implementation of best practices to protect clients’ interests when purchasing and using cloud computing services.
  • Analyzing internal information governance requirements to mitigate cloud computing risks.
  • Developing internal and public-facing policies for responding to government access requests (pursuant to the Electronic Communication Privacy Act and other applicable laws) and addressing consumer privacy concerns in connection with the same.
  • Assessing and advising on international data transfers in the cloud and beyond under the European Data Protection Directive and other non-U.S. laws.
  • Advising technology service organizations on the development of predictive analytics technologies to provide fraud prevention and detection and digital marketing services consistent with applicable laws, FTC guidance, and best practices.
  • Advising traditional brick-and-mortar companies on the development of big data services in the business-to-consumer and business-to-business context based on the aggregation of consumer data.

Recognition

  • Chambers USA: Nationwide Privacy & Data Security (2013 to 2018)
    • Chambers USA Privacy and Data Security- Healthcare Spotlight Table (2018)
  • Recognized as one of the top law firms for client service, BakerHostetler was named to the 2019 BTI Client Service 30 for the fifth consecutive year.

Publications

Key Contacts

Blog

In The Blogs

Previous Next
Data Privacy Monitor
CCPA Amendment Progress Report: July Update
By Taylor A. Bloom, Melinda L. McLellan
July 25, 2019
As we reported in April, May and June, a number of potentially significant amendments to the California Consumer Privacy Act (CCPA) continue to make their way through the state legislative process. Below we provide a summary of recent...
Read More ->
Data Privacy Monitor
EU Updates: ePrivacy Regulation Inches Forward, EDPB Issues Guidance on Interplay Between GDPR and ePrivacy Directive
By Kyle R. Fath, Melinda L. McLellan
July 17, 2019
Adoption of the ePrivacy Regulation Introduced in 2017, and originally slated to go into effect with the GDPR (on May 25, 2018), it now appears the ePrivacy Regulation will not be implemented before late 2021. With the Romanian...
Read More ->
Data Privacy Monitor
FTC Announces Enforcement Action, Warning Letters for Companies Falsely Claiming Privacy Shield Participation
June 21, 2019
The Federal Trade Commission (FTC) recently announced a compliance sweep of companies claiming to be in compliance with the U.S.-EU Privacy Shield and U.S.-Swiss Privacy Shield Frameworks. The U.S.-EU Privacy Shield and the U.S.-Swiss...
Read More ->
Data Privacy Monitor
Texas Moves Forward With Updates to Breach Notification Law and Institutes Privacy Council to Study Data Privacy Legislation
By Caroline B. Brackeen, William R. Daugherty
June 10, 2019
Texas is one of the many states that looked to be following in the footsteps of California’s enactment of a broad consumer privacy law (the California Consumer Privacy Act), which has far-ranging implications for businesses and consumers...
Read More ->
Data Privacy Monitor
Attempt to Expand CCPA Private Right of Action Fails, While Bills Exempting Employee Data and Otherwise Refining CCPA Advance
By Taylor A. Bloom, Alan L. Friel, Niloufar Massachi
June 5, 2019
Over the past several weeks, the California State Assembly has voted in favor of advancing to the California Senate bills that would narrow the reach of the California Consumer Privacy Act (CCPA). Senate bills did not fare as well and have...
Read More ->