Fox Rothschild LLP

Fox Rothschild LLP is a U.S. law firm with more than 950 lawyers in offices throughout the country. Active in more than 60 practice areas, the firm provides a comprehensive suite of legal services to clients ranging from startups to industry-leaders. Fox’s core legal services include Bankruptcy, Corporate, Employment, Entertainment, Intellectual Property, Litigation, Privacy & Data Security, Real Estate and Tax. The firm also has strong practices in Aviation, Cannabis Law, Gaming, Infrastructure and Manufacturing. Fox is an entrepreneurial firm known for advising businesses on strategic growth, and providing clients with the responsiveness and razor-sharp focus of a boutique law firm. Fox Rothschild LLP 2000 Market Street 20th Floor Philadelphia, PA 19103-3222https://www.foxrothschild.com/ Partner, Chair of GDPR Compliance and International PrivacyPhone: (215) 444-7313Email: OKagan@foxrothschild.com Odia Kagan is a partner at Fox Rothschild LLP, a U.S. law firm, where she leads the GDPR Compliance & International Privacy Practice. She advises U.S. and international companies of all sizes on issues of compliance with global data privacy and security regulations. Odia writes and speaks frequently about cutting-edge cybersecurity, privacy and data security topics and is regularly interviewed and quoted by U.S. and international media outlets. Clients rely on Odia for her knowledge of information technologies to effectively design and implement their products and services, consummate their M&A transactions and engage third-party vendors. Odia has advised more than 90 organizations, of varying sizes and industries, on compliance with the EU General Data Protection Regulation (GDPR). She relies on this experience and “lessons learned” to provide pragmatic, actionable advice to companies on their way to compliance with the California Consumer Privacy Act (CCPA). Odia is certified by the International Association of Privacy Professionals as a Fellow of Information Privacy, a Certified Information Privacy Manager (CIPM) and a Certified Information Privacy Professional in the laws of the United States – private sector (CIPP/US), the laws of the European Union (CIPP/E) and by the PECB as a Certified Data Protection Officer (CDPO).

Representatives

Odia Kagan

partner

Contact

Publications

• New CPRA Regs are here again!California Privacy Protection Agency issues new amendments to the CPRA regs for discussion in its upcoming December 8 meeting. What do you need to know?19 January 2024
• CaliforniAI: New Executive Order takes on Generative AICalifornia Governor, Gavin Newsom, issues Executive Order on Generative AI, which echoes some points in the recent Texas and Connecticut AI laws and goes further, imposing detailed, time limited obligations on California State agencies.13 December 2023
• Nothing about #SchremsX: What should companies do while EU bodies discuss the draft US adequacy decision?New US adequacy draft opinion is out. Everyone is talking about #SchremsIII (and IV and X), so I will not. Instead - let's discuss what should US companies involved in EU-US transfers actually be doing now?12 January 2023
• Cry and pray some more: Garante issues Schrems II decisionGarante prohibits further data transfer and fines university 200,000EUR and for SchremsII failures in retaining a US based processor of student exam proctoring data (including facial recognition and profiling) and the us of a US-based cloud storage sub-processor.22 October 2021
• "Schrems - Counter-Schrems"New Bill sets to Impose Limitations on Transfers of Personal Data FROM the US to countries to which export of personal data would harm national security.9 July 2021
• U.S. Outlines Privacy Safeguards for Post-Schrems II Data TransfersThe U.S. government has published a whitepaper that outlines the robust limits and safeguards in the United States pertaining to government access to data in an effort to assist organizations in assessing whether their transfers offer appropriate data protection in accordance with the European Court of Justice's (ECJ) Schrems II ruling.30 November 2020
• EDPB Issues Guidance on GDPR Compliance in the Age of COVID-19After many data protection authorities (in the European Union and beyond) provided guidance and FAQ's on the relationship between COVID-19 (Coronavirus) and data protection laws (e.g. GDPR), the European Data Protection Board has weighed in with a guidance.27 March 2020
• 20 Questions (and Short Answers) on the California Consumer Privacy Act (CCPA)The California Consumer Privacy Act (CCPA), a broad-based law protecting information that identifies California residents, was passed in June 2018 and will go into effect in 2020. Dubbed “GDPR Lite” to denote its similarities to the EU General Data Protection Regulation (GDPR), it is expected to dramatically alter the way U.S.-based companies process data. The law includes detailed disclosure requirements, provides individuals with extensive rights to control how their personal information is used, imposes statutory fines and creates a private right of action —and will require companies to rethink some of their data processing practices.2 September 2019
• Does the California Consumer Privacy Act Apply to Me?The California Consumer Privacy Act (CCPA), a broad-based law protecting information that identifies California residents, was passed in June 2018 and will take effect in 2020. Dubbed “GDPR Lite,” to denote its similarities to the EU General Data Protection Regulation (GDPR), it is expected to be a game-changer for U.S.-based companies that process sensitive data. With detailed disclosure requirements, a grant of extensive rights to individuals to control how their personal information is used, statutory fines and a private right of action, the law requires companies to rethink their data processing practices.2 September 2019
• On The Road Again: Practical First Steps On Your Way to Compliance with the CCPAThe California Consumer Privacy Act (CCPA), a broad-based law protecting information that identifies California residents, will take effect in 2020. The law includes detailed disclosure requirements, provides individuals with extensive rights to control how their personal information is used, imposes statutory fines and creates a private right of action. It is expected to dramatically alter the way U.S.-based companies process data.2 September 2019
• If at First You GDPR, CCPA, CCPA AgainThe California Consumer Privacy Act (CCPA), which takes effect in 2020, has been dubbed “GDPR-Lite” or “California GDPR” because it shares many concepts and compliance obligations with the EU General Data Protection Regulation (GDPR). Both include expanded disclosure obligations and guarantee individuals the right to receive access to their information, request that their information be deleted and opt out of the sale of their information.2 September 2019