Business Law Section & Corporate Counsel Section

7:30 a.m. – 9:00 a.m.

Business Law Section Executive Committee Meeting

8:45 a.m. – 9:00 a.m.

Welcome and Introduction

Speaker

David Goldstein, Esq. | Chair of the Business Law Section, NYSBA, Certilman Balin Adler & Hyman, LLP

Steven R. Schoenfeld, Esq. | Vice Chair of the Corporate Counsel Section, Denlea & Carton LLP

9:00 a.m. – 9:50 a.m.

M&A Experiences: In-house and Outside Counsel Roundtable Chat

This program will consist of a roundtable discussion between outside and in-house counsel regarding their working relationships in M&A transactions. Participants will discuss a variety of topics, including: early stage deal alignment and role definition, contract and deal term negotiations, regulatory and compliance hurdles, information management, data and diligence protocols, and transitional arrangements and integration.

Speaker

Amy Wollensack, Esq. | Partner, Akin Gump Strauss Hauer & Feld LLP

Taa Grays, Esq. | NYSBA President-Elect, former Fortune 50 Vice-President & Associate General Counsel - Information Governance

David Lallouz, Esq. | Partner, Chief Legal Officer and Head of M&A, Sandy Hill Investors

Carol Sanginario, Esq. | Colibri Group, Corporate Counsel

Avi Stadler, Esq. | Esquire Deposition Solutions, General Counsel

Austin Pendleton, Esq. | Finn Dixon & Herling LLP

Moderator

Neil Ruben, Esq. | Partner, Finn Dixon & Herling LLP

1.0 Credit in Areas of Professional Practice

9:50 a.m. – 10:00 a.m.

Break

10:00 a.m. – 10:50 a.m.

Global Privacy Compliance: U.S. Privacy Laws, GDPR, and Cross-Border Data Protection for Multinational Organizations

This program examines critical privacy challenges facing multinational companies with operations in New York and the EU. Attorneys will explore the intersection of U.S. state privacy laws and GDPR requirements, focusing on practical compliance strategies for cross-border data transfers, jurisdictional triggers, and coordinated regulatory responses. The session addresses key issues including extraterritorial application of GDPR, data localization requirements, vendor management across jurisdictions, and best practices for general counsel managing global privacy programs. Participants will gain actionable insights for developing comprehensive privacy frameworks that satisfy both U.S. and European regulatory expectations.

Speaker

Ash Costello, Esq. | Partner, Gunner Cooke LLP

David Siffert, Esq. | Legal Director of the Surveillance Technology Oversight Project (S.T.O.P.)

Avv. Francesco Conti | Solving

Moderator

Luca CM Melchionna, Esq. | Vice Chair BLS, Chair Venture & Technology Law Committee, Melchionna PLLC

1.0 Credit in Cybersecurity, Privacy and Data Protection-General

10:50 a.m. – 11:00 a.m.

Break

11:00 a.m. – 12:30 p.m.

Cybersecurity Law and Risk Management: Essential Strategies for Multinational Organizations

This program equips NY attorneys and general counsel with essential knowledge to navigate the complex cybersecurity legal landscape. Participants will examine current regulatory requirements including NY DFS Cybersecurity Regulation (23 NYCRR 500), federal frameworks, and emerging state standards. The session covers practical topics including incident response planning, breach notification obligations, third-party vendor risk management, cyber insurance considerations, and board-level reporting requirements. Faculty will address recent enforcement actions, litigation trends following data breaches, contractual risk allocation strategies, and the intersection of cybersecurity with privacy laws. Attendees will gain actionable guidance on developing comprehensive cybersecurity compliance programs, managing post-breach legal obligations, and advising leadership on cyber risk governance. The program also explores emerging challenges including AI security risks, ransomware response protocols, and evolving standards of care for corporate cybersecurity practices.

Speaker

Sophie Kletzien, Esq. | Associate, Holland & Knight, LLP

Paul Bond, Esq. | Partner, Holland & Knight, LLP

1.0 Credit in Cybersecurity, Privacy and Data Protection-General