The data privacy landscape remains in constant flux. At least six U.S. states now have their own data privacy laws, with more sure to come. Organizations that share personal information with vendors must ensure compliance with these ever-evolving privacy requirements when assessing and onboarding those vendors. Counsel from two major businesses recently shared practical insights on how they are navigating this challenging terrain during a panel at the IAPP Global Privacy Summit 2023, which was moderated by a partner at Hintze Law. This article synthesizes their discussion. See “Managing Vendor Contracts From the Data Controller's Perspective” (Mar. 31, 2021).