Speakers
- To Be Announced!, More information to follow.
Headline Sponsor
Data protection, privacy and security are essential elements of any successful organisation’s operational make-up. Getting these things right can improve stakeholder trust and take any company to the next level.
PrivSec World Forum will bring together a range of speakers from world-renowned companies and industries—plus thought leaders and experts sharing case studies and their experiences—so that professionals from across all fields can listen, learn and debate.
The event is a must-attend for data protection, privacy and security professionals who are keen to network, learn more, discuss and add expertise to how these sectors are interconnected.
→ International data transfers
→ Data ethics
Attendance at PrivSec World Forum will help your organisation learn more about trust, digital transformation, ethics, data protection and security challenges, solutions and opportunities, as well as the chance to network with your peers and develop business relationships.
Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on the topics of enterprise GRC, GRC technology, corporate compliance, and policy management. With 27+ years of experience, Michael helps organizations improve GRC processes, design and implement GRC architecture, and select technologies that are effective, efficient, and agile. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — being the first to define and model the GRC market in February 2002 while at Forrester.
Michael has contributed to U.S. Congressional reports and committees, and currently serves on the Leadership Council of the OCEG and chairs the OCEG Technology Council, OCEG Policy Management Group, and the OCEG GRC Architect Group.
Michael is quoted extensively in the press and is respected for his commentary on broadcast news channels. He is an Honorary Life Member in The Institute of Risk Management for his contributions to risk management and GRC. In June 2007, Treasury & Risk recognized Michael as one of the 100 most influential people in finance with specific accolades noting his work in “Governance and Compliance: Saving the Planet and the Corporation” and as a “Rising Star in Rocky Times: Corporate America’s Outstanding Executives.”
Prior to founding GRC 20/20 Research, Michael was a Vice-President and ‘Top Analyst’ at Forrester Research, Inc. Before Forrester, he led the risk/compliance consulting practice at a professional services firm, and prior to that has specific experience managing compliance and risk within commercial organizations.
Michael’s educational experience consists of a Juris Doctorate in law and a Bachelor of Science in Business. Michael is currently pursuing a Master of Divinity at Trinity Evangelical Divinity School with a research focus in ethics and church history. He is a GRCP (GRC Professional), CCEP (Certified Compliance and Ethic Professional), and a CISSP (Certified Information Systems Security Professional). OCEG has recognized him as an OCEG Fellow for his contributions and advancement of GRC practices around the world.
PrivSec World Forum Agenda
BST | Tuesday 7th June 2022 |
---|---|
09:00 | Registration Speakers
|
09:15 | |
09:30 | |
09:45 | |
10:00 | Breaking Down Barriers: How Data Protection and Security Teams Can Work Together Data protection and security are distinct but interrelated fields. And it's increasingly clear that the technical and operational knowledge of professionals from both disciplines are required to solve some of tech's hardest problems. From applying supplementary measures for international data transfers to ensuring data is both secure and usable, data protection and security teams share many common objectives. This panel will consider how data protection and security professionals can learn from each other and work together toward the mutual goal of safeguarding data and protecting consumers. Moderator
Speakers
|
10:15 | |
10:30 | Re-Thinking Trusted Data The explosive growth of data and the value it creates calls on data professionals to level up their programs to build, demonstrate, and maintain trust. The days of fine print, pre-ticked boxes, and data hoarding are gone and strong collaboration from data, privacy, marketing and ethics teams is necessary to design trustworthy data-driven practices. Join us for a discussion on the latest trends in trusted data and how you can take critical steps to build trust in data practices by: Embedding privacy by design into data operations, Respecting individual choice and optimizing the ongoing relationship with consumers, Preparing for future data challenges including responsible AI and sustainability Speaker
|
10:45 | |
11:00 | |
11:05 | Break |
11:15 | |
11:20 | The UK's GDPR Reforms: "Brexit Opportunity" or Compliance Burden? The UK has set out a bold set of proposed reforms to its data protection framework. Some observers are concerned about the impact on fundamental rights—others see the proposals as an opportunity to make implementation easier for UK businesses. But given the extraterritorial nature of most data protection laws globally, how much difference will these reforms ultimately make? Will businesses operating internationally simply default to the highest level of compliance (namely, the EU GDPR), or will some attempt to tailor compliance to specifically for the UK market? This panel will explore the extent of the impact of the UK's proposed GDPR reforms and consider how—or whether—organisations will adjust their data protection programmes. Host
Speakers
|
11:30 | |
11:45 | |
12:05 | |
12:10 | Data everywhere: how big tech is digitally transforming the trust model In the post-pandemic era, many organisations are reinventing themselves and evaluating business models to look at new and inventive ways to bring their products and services to the market. Whether it’s hybrid working, utilising AI / ML to drive business insights, or embracing smart technologies. With each technological advancement comes the extrapolation of data, and with that comes increased risk when it comes to security and privacy In this session, we’ll be sharing insights on data principal challenges, solutions and opportunities associated with the privacy imperative – how companies can continue to build innovate solutions and drive business value without compromising consumer and market trust. Speaker
|
12:15 | |
12:30 | |
12:40 | Lunch |
12:45 | |
13:00 | |
13:25 | Keynote Talk |
13:30 | |
13:45 | |
14:10 | |
14:15 | Consumer Trust and the GDPR's Transparency Requirements Transparency is a cornerstone of GDPR compliance. EU law requires organisations to be up-front about all aspects of their data processing and provide concise, context-specific notice when collecting an individual's personal data. Violating the GDPR's transparency requirements is one of the most common reasons for enforcement activity—and a sure way to damange your customers' trust and loyalty. Our panel will dig into the GDPR's notice requirements to help you leverage transparency and earn stakeholder trust. Speakers
|
14:30 | |
14:45 | |
15:00 | Break |
15:10 | |
15:15 | The Data Security Lifecycle: Protecting Data During Transit, Storage and Use Protecting data is a complex task and the requirements vary depending on its purpose, sensitivity, and the wider context in which the data is processed. To prevent unauthorised access or accidental disclosure, security professionals must consider which techniques to employ when data is in transit, at rest, and in use. This panel will provide practical insights on the steps you should be taking to secure data at every stage of its lifecycle. Host
Speakers
|
15:30 | |
15:45 | |
16:00 | |
16:05 | Attracting the Female Leaders of Tomorrow in Data Protection and Data Security More information to follow Host
Speakers
|
16:15 | |
16:30 | |
16:45 | |
17:00 | Drinks Reception |
17:15 | |
17:30 | |
17:45 | |
18:00 |
PrivSec World Forum Agenda
BST | Wednesday 8th June 2022 |
---|---|
09:00 | Registration Speakers
|
09:15 | |
09:30 | |
09:45 | |
10:00 | The Role of PrivSec in the S & G of ESG ESG – Environmental, Social, Governance – is getting a lot of attention, and it is time for organisations to build a strategic ESG plan for reporting in 2022. In this new era of ESG, organisations have a renewed focus on PrivSec. PrivSec is more than complying with laws and regulations. PrivSec is about the integrity and accuracy of data, the right of individuals to control and have access to their personal data, appropriate and approved use, data protection, and security of the organisation's physical and logical assets. This keynote will explore privacy in the context of: Regulations & standards, what organisations should expect from current and pending PrivSec requirements - ESG, the role of PrivSec in an organisation's ESG program - Extended Enterprise, how to manage PrivSec across distributed third-party relationships - Best Practices, what is needed to manage PrivSec to be efficient, effective, and agile Keynote
|
10:15 | |
10:30 | Marketing Issues & Trends: How to Communicate Compliantly and Avoid Dark Patterns Marketing is notoriously tricky, and privacy and data protection regulators continue to focus on this thorny legal area. With recent decisions on when consents are valid and when a service email is actually marketing, and EU new guidance and legislation focusing on dark patterns, this session aims to give an overview of key legal developments, and practical tips you can take to mitigate marketing risk. Speaker
|
10:45 | |
11:00 | |
11:05 | Break |
11:15 | |
11:20 | The Dangers of AI-Driven Mass Surveillance Artificial intelligence is driving huge improvements in fields as diverse as medicine and climate monitoring. But from biometric identification to "social credit" scoring systems, AI is also providing new ways for governments and large corporations to track and surveil people—with significant implications for their privacy and freedom. How is AI contributing to the mass surveillance of vulnerable populations? What role is the private sector playing in supporting—and resisting—such activities? And can regulation catch up with the worrying advancements already made in this field? Speakers
|
11:30 | |
11:45 | |
12:05 | |
12:10 | Cracking the Code for Managing Your Modern Sensitive Data Inventory Today’s data compliance landscape demands that organizations have complete oversight of their sensitive data. However, the inherent intangibility of data creates challenges in pinpointing when new data is created, collected, or destroyed. Enduring remote work only exacerbates this: Networks are decentralized and dispersed to support productivity. But this leaves organizations at continued loss on best managing data. This session explores the most common challenges of modern data inventory processes along with top solutions to solve them. Speaker
|
12:15 | |
12:30 | |
12:40 | Lunch |
12:45 | |
13:00 | |
13:25 | Not Another DSAR: Consumer Trust, Data Subject Rights and 'Weaponised' Access Requests The data subject access request (DSAR) is a cornerstone of data protection rights. But providing access to an individual's personal data can be a complicated and resource-intensive process. This panel will explore how you can streamline your DSAR process to improve transparancy and build consumer trust. Host
Speakers
|
13:30 | |
13:45 | |
14:10 | |
14:15 | Insider Threats: Just How Trustworthy Are Your Employees? Security leaders are increasingly concerned about the risk of insider threats. Recent attacks from cybercrime gang Lapus$ have reemphasised the need for a robust and effective insider threat monitoring program. This panel will explore the fundamentals of fighting insider threats and provide actionable insights on protecting your organisation from malicious employees, contractors and ex-employees. Host
Speakers
|
14:30 | |
14:45 | |
15:00 | Break |
15:10 | |
15:15 | International Data Transfers: Are Strict Transfer Rules Creating a "Splinternet"? The EU-US data transfer problem might be resolved reasonably soon—even if the resolution is only temporary. But the EU isn't the only country with strict data export rules—and some observers worry that the trend of data localisation is closing down the open web. This session will bring together international data transfer experts to discuss whether increasingly strict data export rules present a fundamental challenge to the open web. Speakers
|
15:30 | |
15:45 | |
16:00 | |
16:05 | Data Protection Impact Assessments (DPIAs): Implementing a Target Operating Model Data Protection Impact Assessments (DPIAs) are a key compliance challenge for many privacy professionals. But they are also an important way to ensure you are minimising data processing risks and respecting data subjects' rights. This session will explore how you can work towards a target operating model for conducting DPIAs—helping you streamline and perfect this vital GDPR process. Host
Speakers
|
16:15 | |
16:30 | |
16:45 | |
16:50 | Closing Remarks |
16:55 | |
17:00 |
OneTrust is the category-defining enterprise platform to operationalize trust. More than 12,000 customers, including half of the Fortune Global 500, use OneTrust to make trust a competitive differentiator, implementing central agile workflows across Privacy and Data Governance, GRC and Security Assurance, Ethics and Compliance, and ESG and Sustainability. The OneTrust platform is backed by 200 patents and powered by the OneTrust Athena™ AI and robotic automation engine. The OneTrust platform is backed by 200 patents and powered by the OneTrust Athena™ AI.Learn more: OneTrust.com and LinkedIn.