This program is eligible for 1.5 hour of CLE credit in 60-minute states. In 50-minute states, this program is eligible for 1.8 hours of CLE credit. Credit hours are estimated and are subject to each state’s approval and credit rounding rules.
Overview
Nonprofits collect a surprising amount of sensitive data — donor financial information, volunteer background checks, client intake forms, health records, and more — yet most operate without a clear privacy strategy or data governance plan. This presentation cuts through the legal jargon to give nonprofit leaders and their counsel a practical understanding of what data privacy laws actually apply to their organizations, including COPPA, state breach notification requirements, and the growing patchwork of state-level, federal, and international consumer privacy statutes. We'll examine the most common data collection mistakes nonprofits make, why the "we're just a small charity" mindset creates real legal exposure, and what a baseline-compliant data, privacy, and security program actually looks like for organizations with limited staff and budget. The session is designed to be immediately actionable. Attendees will walk away with a baseline framework for understanding what data their organization collects, how it's stored, who has access to it, and when it must be deleted or secured. We'll work through real-world nonprofit scenarios to show how privacy obligations differ depending on the population served and the technology used. Whether you're in-house counsel for a mid-size nonprofit or an outside attorney advising smaller charitable clients, this session will give you the tools to start a practical, proportionate privacy conversation with your clients the moment you walk out the door.
Faculty
Jordan L. Fischer, Esq., CIPP/US, CIPP/E, CIPM
Jordan L. Fischer, founding partner and owner of Fischer Law, LLC, is a self-proclaimed privacy and technology legal nerd and entrepreneur. With her background in owning and operating businesses, and her experience working across the globe, Jordan brings extensive experience and practical knowledge to the global intersection of law and technology. Jordan understands the many demands on businesses, and works to create a balanced approach to privacy and data security compliance. Jordan works with businesses to continually evaluate and assess legal and business opportunities and risks to provide public and private sector clients with practical data privacy and cybersecurity counsel and business strategic advice. Jordan’s goal is to understand your business, your approach, your risks, and then work with you to create effective, long-lasting solutions to your data privacy and technology legal challenges. With more than ten years of experience in data privacy, cybersecurity, and technology law, Jordan advises clients on a variety of regulations, including but not limited to the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA)/California Privacy Rights Act (CPRA), the Fair Credit Reporting Act (FCRA), and the Driver’s Privacy Protection Act (DPPA). Additionally, she provides counsel on biometric data laws, global data breach standards, artificial intelligence regulations and federal and state unfair business practices acts and privacy frameworks such as International Standards Organization (ISO) 27001 and 27701, the National Institute of Standards and Technology (NIST), and the Payment Credit Card Industry Data Security Standard (PCI DSS). Jordan regularly represents clients in contractual negotiations pertaining to technology, data management, artificial intelligence, security, and privacy, and she assists in the development of customized, right-sized compliance programs to address numerous regulatory requirements and industry best practices. She also advises clients on cross-border data management and information governance, developing business-oriented and cost-effective strategies for information security, data privacy, and technology compliance. Jordan’s experience provides her the opportunity to represent clients in a wide range of industries, gaining valuable insight into sectors including agriculture, adtech, emerging technologies (blockchain, Internet of Things (IoT), and Artificial Intelligence (AI), gaming, healthcare, manufacturing, and pharmaceutical. She advises clients on third-party management, addressing the privacy and security of their supply chain. She also collaborates with clients to develop business solutions that incorporate privacy-by-design and security-by-design principles, fusing regulatory requirements with practical, real-world solutions. In addition to her private practice, Jordan is a Cybersecurity Lecturer at the University of California, Berkeley and a Visiting Research Professor in the Center for Law and Transformational Technology at the Thomas R. Kline School of Law at Drexel University. Her academic research investigates the convergence of law and technology, as well as the practical implications of regional data protection regulations in the context of the global economy. Jordan is a globally recognized speaker on a wide range of technology and privacy law topics. In addition, she hosts the podcast Cybersecurity and Data Privacy: The New Frontier for the American Bar Association, which concentrates on data security, privacy, and related legal topics. On the podcast, Jordan discusses a variety of topics focused on law, technology, privacy, and cybersecurity from the perspective of various industries. Jordan is a Certified Information Privacy Professional for Europe (CIPP/E) and a Certified Information Privacy Professional for the United States (CIPP/US), as well as a Certified Information Privacy Manager (CIPM), as certified by the International Association of Privacy Professionals. She is a certified trainer for the International Association of Privacy Professionals.

Need help navigating your CLE requirements?
You have a lot on your plate. We’ll help you stay on top of your compliance — in PA and beyond.