Privacy Law Essentials for Digital Advertising Professionals

Sundeep Kapur advises on regulatory compliance and investigations, incident response and remediation, commercial transactions and other data initiatives involving complex or emerging technologies. He provides tailored and practical guidance to clients, from startups to global corporations, on various privacy laws and regulatory frameworks, including the FTC Act, California Consumer Privacy Act of 2018 (CCPA), California Privacy Rights Act (CPRA), and the General Data Protection Regulation (GDPR).

Sundeep also possesses an in-depth technical and legal understanding of the advertising technology (adtech) ecosystem (e.g., connected TV, linear TV, over-the-top media, desktop, mobile). He participates in adtech working groups and is a key contributor to the development of industry-wide privacy compliance solutions. He advises on compliance with self-regulatory regimes developed by the Network Advertising Initiative (NAI), the Interactive Advertising Bureau (IAB), and the Digital Advertising Alliance (DAA).

Sundeep is accredited by the International Association of Privacy Professionals (IAPP) as a Certified Information Privacy Professional in the United States (CIPP/US).

Shannon K. Yavorsky is a leading authority on United States (U.S.) and European data privacy and security issues. She is uniquely qualified in California, England and Wales and Ireland and helps clients navigate the increasingly complex global privacy and data security regulatory landscape.

Shannon Yavorsky is the head of Orrick’s global Cyber, Privacy & Data Innovation Group. Shannon advises clients on a broad range of United States (U.S.) and European data privacy and cybersecurity issues, including emerging issues surrounding the California Privacy Rights Act (CPRA), the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR) and the e-Privacy Directive. She helps clients undertake comprehensive privacy and cybersecurity assessments worldwide, evaluates privacy and security risks in corporate transactions and drafts and negotiate data-related vendor and arrangement contracts. She also counsels clients on cross-border data transfers, data breaches and developing global privacy compliance programs. She has significant experience with model contract clauses, privacy policies, website terms and conditions, data processing agreements and privacy and security issues in corporate transactions

In addition to the GDPR, CPRA and CCPA, Shannon advises on an array of privacy and security laws and regulations, including:

Controlling the Assault of Non-Solicited Pornography And Marketing Act (CAN-SPAM)
Electronic Communications Privacy Act (ECPA)
Fair Credit Reporting Act (FCRA)
Gramm–Leach–Bliley Act (GLBA)
Health Insurance Portability and Accountability Act (HIPAA)
Telephone Consumer Protection Act (TCPA)
State breach notification laws
Advertising and payment card processing self-regulatory frameworks

Shannon also has an active general consumer protection practice and counsels clients on interest-based advertising, sweepstakes and marketing promotions, retail sales and e-commerce platforms. Her clients are multinational clients across diverse industry sectors, with an emphasis on technology, financial services, retail, staffing, advertising, healthcare, and automotive.