Winstead attorneys provide practical counsel and services to help clients understand and comply with rapidly evolving domestic and international data privacy and protection laws.  We advise clients in implementing the legal and technological programs and policies, both for customer and employee data, necessary to comply with these regulatory frameworks throughout the world, including the European Union’s new General Data Protection Regulation (GDPR).

Our multidisciplinary team of attorneys has considerable experience in privacy and data security issues related to compliance and risk mitigation, commercial transactions, and cross-border data transfers in a variety of complex industries, including aviation, transportation, technology, oil and gas, and healthcare.

Our team’s extensive experience includes:

• Advising on compliance with the specific requirements imposed upon both controllers and processors of personal data under the GDPR
• Advising on cross-border data transfers
• Assessing and implementing data privacy and security programs
• Drafting jurisdiction-specific data use and privacy policies
• Drafting and negotiating contracts involving the processing of personal data, including IT and cloud services, human resources and benefits-related services, and the full range of outsourcing-related services

Representative Experience:

• Represent leading international airline in negotiation of data privacy and data contractual terms, and preparation and review of applicable privacy policies, in transaction regarding  procurement of lodging accommodation platform with world’s largest on-line travel agent and accommodations provider
• Represent Fortune 100 company in negotiation of data privacy and processing contractual terms in transaction involving establishment of private student loan program with leading direct banking and payment services company
• Represent leading vacation package provider in negotiation of data privacy and processing contractual terms in transaction pertaining to the procurement of lodging accommodation services with world’s most-visited vacation resort
• Represent Fortune 100 company in negotiation of data privacy and processing contractual terms in transaction pertaining to procurement of information technology staffing services with leading managed services and recruitment process outsourcing provider
• Represent leading international airline with respect to issues related to jurisdiction-specific data privacy compliance, cross-border data transfers, and contractual provisions pertaining to data privacy and processing in negotiations with other international airlines and service providers related to the procurement of premium passenger services
• Represent Fortune 100 company in negotiation of data privacy and processing contractual terms in connection with negotiation of credit card co-branding agreement with a U.K.-based bank
• Represent international airline in negotiation of data privacy and security provisions in connection with negotiation of capacity purchase agreements with various regional carriers
• Represented Fortune 100 company in negotiating data privacy and processing contractual terms in transactions regarding life, dental, and long-term disability insurance and other employee assistance programs
• Represent Fortune 100 company in negotiating data privacy and processing contractual terms in transaction regarding pharmacy benefit management for its employees
• Represent leading transportation company in negotiation of contractual provisions regarding data security and data processing with respect to agreements for the procurement of international ground handling services; representation included advising on issues concerning the resolution of disputes involving data security and requirements relating to segregation of data
• Represent Fortune 100 company in negotiation of contractual requirements regarding data privacy and security with respect to agreements with international providers of HR-related services