Tech & Sourcing @ Morgan Lewis

As part of our Spotlight series, we welcome Todd Liao, a partner in our Shanghai office who works with clients on a wide range of complex commercial and financial transactions and legal issues involving China. Todd is a thought leader on issues facing tech firms doing business in China, recently publishing articles on new measures for online advertising in China, data privacy, and key drivers of Asia’s tech scene. We caught up with Todd to discuss data privacy regulations in China and cross-border data transfers.

The US Federal Trade Commission (FTC) recently proposed expanding its Negative Option Rule to all subscription agreements. Businesses offering subscription services would be required to make it at least as easy for consumers to cancel a subscription service as it is to sign up for it. For example, if a consumer can sign up for a service online, then the consumer must also be able to cancel it online in the same number of steps (and not be required to cancel in person).

Join us at our Philadelphia office for an interactive discussion on hot topics related to next-generation transactions and outsourcing, followed by a reception with refreshments and opportunities to network with peers.

The European Union’s General Data Protection Regulation (GDPR) requires companies to monitor and comply with some of the strictest privacy laws in effect. Now, the European Commission is refocusing efforts and oversight on ongoing investigations under the GDPR. Going forward, companies may want to focus even more intently on their compliance as the EU steps up investigatory procedures.

As we reach the end of the year 2022, we have once again compiled all the links to our Contract Corner blog posts, a regular feature of Tech & Sourcing @ Morgan Lewis. In these posts, members of our global technology, outsourcing, and commercial transactions practice highlight particular contract provisions, review the issues, and propose negotiating and drafting tips.

The UK Financial Conduct Authority (FCA) and Prudential Regulation Authority (PRA) on December 20, 2022, announced fines totaling £48.65 million ($59 million) on TSB Bank plc (TSB) for operational resiliency failures, after an IT upgrade led to customers being unable to access core banking services.

The European Union (EU) Commission released its Draft Adequacy Decision for the EU-US Data Privacy Framework on December 13, which, in conjunction with President Biden’s executive order issued on October 7, will further facilitate trans-Atlantic data flows. The Draft Adequacy Decision mirrors the executive order, which established safeguards relating to the handling of personal information in the course of signals intelligence activities. If and when adopted, the adequacy decision will impact contractual requirements and processes by restoring data flows through a new Trans-Atlantic Data Privacy Framework.

On November 18, days before the FIFA World Cup Qatar 2022 was due to start, Anheuser-Busch InBev (the owner of Budweiser, a World Cup sponsor since 1985) was dealt an unexpected yellow card: FIFA issued a statement that appeared to renege on certain terms of their $75 million (£63 million) commercial sponsorship agreement.

The US Department of Commerce’s Bureau of Industry and Security released an interim final rule (IFR) on October 7 imposing new export controls on certain advanced computing and semiconductor manufacturing destined for the People’s Republic of China (PRC). In their LawFlash, partners Giovanna Cinelli, Kenneth Nunnenkamp, and Carl Valenstein; of counsel Heather Sears; and associates Katelyn Hilferty, Christian Kozlowski, Patricia Cave, and Jiazhen Guo discuss the scope of the new export controls, open issues and questions regarding the regulation, and potential courses of action to consider.

In a webinar that has value for all technology clients, Morgan Lewis partners Kenneth Davis and Ezra Church will review intellectual property (IP) protection and cyber threats for growing businesses.