In Person

Privacy + Security Forum Fall Academy

November 8 – 10, 2023
The George Washington University
Event details
November 8 – 10, 2023
The George Washington University
800 21st St. NW, Washington, DC 20052

Event summary

The Privacy + Security Forum Fall Academy brings together the most seasoned thought leaders in the areas of privacy and security law. It includes rigorous deep-dive sessions that deliver hands-on activities and practical takeaways for conference participants. The academy is attended by privacy and security professionals, chief information officers, lawyers, academics, experts from nongovernmental organizations and think tanks, technologists, and policymakers.

Event details


Featured agenda items

Thursday, November 9, 2023 | 2:30 – 3:30 pm EST

The Role of Article III’s Injury-in-Fact Requirement in Privacy Class Actions – The Unsettled Legacy of TransUnion v. Ramirez

Presenters on this panel included Cooley cyber/data/privacy special counsel Josef Ansorge, as well as Sheppard Mullin partner David Poell. 

The Supreme Court’s decision in TransUnion LLC v. Ramirez held that a statutory violation does not always result in an Article III “injury-in-fact.” This session explored how lower courts have interpreted the injury-in-fact requirement in privacy class actions in a post-TransUnion environment where plaintiffs continue to rely on alleged violations of state and federal statutes as the exclusive basis for standing in federal court.


Friday, November 10, 2023 | 2:30 – 3:30 pm EST

Recent FTC Actions Under the FTC Health Breach Notification Rule and What It Means for Digital Health Companies

Cooley cyber/data/privacy special counsel Andrew Epstein presented on this panel, alongside co-panelists Barbee Mooneyhan, chief information security and privacy officer at Woebot Health, and Dan Guggenheim, chief legal officer at Innovaccer.

In the post-Roe era, the federal government and state governments continue to focus on consumer digital health privacy. In 2023, the Federal Trade Commission (FTC) engaged in at least two enforcement actions under its Health Breach Notification Rule, focusing on the disclosure of sensitive health information to third parties through mobile-tracking technologies. This session explored how the FTC’s actions highlight risks and issues to address in an effort to avoid fines, government-imposed changes to business practices and increased regulatory oversight.

For more information, please email Amanda Meier.

This content is provided for general informational purposes only, and your access or use of the content does not create an attorney-client relationship between you or your organization and Cooley LLP, Cooley (UK) LLP, or any other affiliated practice or entity (collectively referred to as “Cooley”). By accessing this content, you agree that the information provided does not constitute legal or other professional advice. This content is not a substitute for obtaining legal advice from a qualified attorney licensed in your jurisdiction and you should not act or refrain from acting based on this content. This content may be changed without notice. It is not guaranteed to be complete, correct or up to date, and it may not reflect the most current legal developments. Prior results do not guarantee a similar outcome. Do not send any confidential information to Cooley, as we do not have any duty to keep any information you provide to us confidential. This content may be considered Attorney Advertising and is subject to our legal notices.