Roland Carvalho III

Industries

• Finance
  • Regional & Community Banks
• Health Care Innovation
  • Medical Technology
    • Data Application & Security
• Technology
  • Computer Systems & Software Development

Practices

• Data, Digital Assets & Technology
  • Data Security & Privacy

Biography

Roland specializes his practice at FBT in privacy and data security law and is a Certified Information Privacy Manager (CIPM) as recognized by IAPP (International Association of Privacy Professionals).

He assists clients with navigating the intricate web of privacy and cybersecurity laws and regulations that require compliance in today’s global economy and has extensive privacy experience handling matters related to U.S. federal and state privacy laws including the Gramm-Leach-Bliely-Act (GLBA), the Health Information Portability and Accountability Act (HIPAA), the Fair Credit Reporting Act (FCRA), the Children’s Online Privacy Protection Act (COPPA), and the California Consumer Privacy Act (CCPA).

Roland has significant experience dealing with international privacy laws including the European Union’s General Data Protection Regulation (GDPR), Canada’s Personal Information Protection and Electronic Documents Act, Brazil’s Lei Geral de Proteção de Dados Pessoais (LGPD) and China’s Personal Information Protection Law (PIPL), Cybersecurity Law (CSL) and Data Security Law (DSL).

Roland also has experience in drafting and negotiating agreements which govern the cross-border transfer of data, especially between the US and Europe, including implementing Standard Contractual Clauses (SCCs), data processing agreements, business associate agreements (BAAs) and other privacy or security exhibits and agreements. He actively manages privacy and cyber incident responses, program compliance, reviews of externally facing privacy material such as privacy notices and analyzing privacy laws and regulatory decisions.

In addition to data security and privacy, Roland assists clients with the drafting and negotiation of technology transaction agreements such as Software as a Service (SaaS) agreements, Business Process as a Service (BPaaS) agreements and Master Services Agreements (MSAs).

Prior to joining FBT, Roland spent four years working as in-house counsel with a globally positioned Fortune 500 FinTech, where his practice specialized in privacy, cybersecurity and data security.