| GMT |
Wednesday 29th November 2023 |
| 09:00 |
India introduces new Digital Personal Data Protection Bill
09:00 AM - 09:45 AM
Highly relevant for India's rich and vibrant community of privacy pros and highly relevant for the global privacy community whose organisations process data “in connection with any activity related to offering or goods or services” in India, the DPDP Bill, 2023, is the fifth iteration of India’s much-awaited data protection law, with previous versions released in 2018, 2019, 2021, and 2022.
Speakers
- Nandita Rao Narla, Head of Technical Privacy & Governance, DoorDash
- Emma Green, Managing Partner, Cyber Data Law Solicitors
- Salman Waris, Partner Head of TMT & IP Practice, TechLegis Advocates & Solicitors
|
| 09:15 |
| 09:30 |
| 09:45 |
| 10:00 |
Like the GDPR but not the same: Asia’s Data Protection journey
10:00 AM - 10:45
Privacy laws in Asia are being transformed: in the past 12 months, several key jurisdictions have either introduced their first-ever comprehensive data protection framework or are updating and reforming their existing privacy laws. This includes:
- Australia: Which has amended its Privacy Act 1988 and introduced the Telecommunications Regulations 2021 and the Security of Critical Infrastructure Act 2018
- The PRC: Which has enacted the Personal Information Protection Law (“PIPL”)
- Indonesia: Which has passed its long awaited Data Protection Law
- Japan: Which has updated the Act on Protection of Personal Information
- Thailand: Which has introduced the Personal Data Protection Act B.E. 2562 (2019)
- Vietnam: Which has very recently passed Decree No. 13/2023/ND-CP
Join us for an update on your jurisdiction Data Protection Law, and get a chance to have your questions answered.
Speakers
- Carolyn Bigg, Partner, Global Co-Chair data protection, privacy and security, DLA Piper Hong Kong
- Ina Weygant, Privacy & Compliance Director, Mambu
- Willem Balfoort, APAC and EMEA Privacy, Stripe
- Amigo L. Xie, PhD, Partner, Registered Foreign Lawyer (PRC), K&L Gates
|
| 10:15 |
| 10:30 |
| 10:45 |
| 11:00 |
The ICO and the Regulatory Landscape: Fireside Chat with Emily Keaney, Deputy Commissioner of the ICO and Ana Fernandes, Principal Consultant at PA Consulting
11:00 AM - 11:30 AM
This discussion will focus on the role of the ICO in the broader digital regulatory landscape, including changes presented in the upcoming Data Protection and Digital Information Bill.
Speakers
|
| 11:15 |
| 11:30 |
Zero trust: Rethink security, and redefine resilience
11:30 AM - 12:15 PM
With the rise of remote and hybrid work, organisations have grappled to secure their digital ecosystems, providing cybercriminals with fresh grounds in unsecured home networks, personal devices, and weak authentication practices.To navigate the hybrid world securely, traditional cybersecurity approaches may no longer suffice in protecting organisations from the increasing sophistication of cyber threats. As cyber threats continue to evolve, Zero Trust is set to play a critical role in safeguarding organisations and ensuring a resilient cybersecurity strategy for the digital age
Speakers
- Jessica Figueras, CEO, Pionen
- Martin Gomberg, a.k.a The Privacy CIO, Author, CISO Redefined, Consultant and Founding Member, The Privacy Panel
- Alekh Kaur, Cybersecurity and Data Science Delivery Lead, HSBC
- Jenni Parry, Associate Director of Cyber Risk, Aon
|
| 11:45 |
| 12:00 |
| 12:15 |
| 12:30 |
Human-Centric Security Culture
12:30 - 13:15
Traditionally, building a security culture is based on strict industry certifications, policies, laws, and regulations. Security professionals are taught that employees in the organization are the most significant risks and to ""manage those risks."" But what does it take to integrate human centricity into your security culture?
Speakers
- Igor Gutierrez, Information Security Officer & DPO, B. GROB do Brasil S.A.
- Adam Low, CTO, Zivver
- Federico Iaschi, Head of Cyber Security Resilience and Observability, Virgin Media O2
- Miriam Mwonge, Information Management; Data Privacy Operations, East African Breweries Plc
- Amy Rose, Head of Governance and Compliance, NHS Confederation
|
| 12:45 |
| 13:00 |
| 13:15 |
| 13:30 |
Workplace AI policies: Does your company need them?
13:30 - 14:15
There is no doubt that AI is the new revolution. It is developing rapidly, both technologically and legally, and many organisations are facing the big question: How do you remain compliant, while gaining the commercial benefit of using AI? This interactive session will provide a practical roadmap to avoid AI chaos, how to overcome challenges and pitfalls, and build a responsible AI strategy in the workplace.
Speakers
- Kristen Pennington, Partner, Privacy Law, McMillan LLP
- Prekshi Gupta, AI Engineer, Fugro
- Alexander Alaraj, Group Data Protection Officer, IKEA Retail (Ingka Group)
- Janine McKelvey, General Counsel - Data, Group Data Protection & Ethics Officer, BT Group
|
| 13:45 |
| 14:00 |
| 14:15 |
| 14:30 |
Embedding Privacy by Design to Enforce Responsible Use of Data
14:30 PM - 15:00 PM
Privacy is no longer just about compliance, it’s about data. How can you unlock the value of data without compromising privacy or security? Placing data responsibility at the core of your strategy is not merely a risk avoidance exercise, it’s key to data protection, fostering collaboration between privacy and data governance teams, and foundational to trust with customers. The recent ISO 31700 Privacy by Design guidelines provide a framework for embedding privacy by design throughout the business.
In this session, we’ll discuss recent Privacy by Design guidelines and what this tangible guidance means for privacy programs looking to evolve to beyond compliance to enforce responsible use of data.
Key Takeaways:
· Understand ISO 31700 Privacy by Design standards and how to implement.
· Understand the link between Privacy and Data Governance and practical steps toward effective partnership.
· Learn why purpose is the key to enabling responsible use of data without disrupting the rhythm of business.
Speakers
|
| 14:45 |
| 15:00 |
Transformative changes: 36 out of 54 African countries embrace Data Protection Law
15:00 - 15:45
African countries are continuing to strengthen data protection legal and regulatory frameworks. To date, 36 out of 54 African countries have data protection laws and/or regulations. Sixteen countries have signed the African Union Convention on Cyber Security and Personal Data Protection adopted on 27 June 2014 (“Malabo Convention”) and thirteen countries have ratified it, the latest being Niger. 2022 was also a year of unprecedented enforcement.
Speakers
|
| 15:15 |
| 15:30 |
| 15:45 |
| 16:00 |
The UK Government renews its efforts to UK's Data Protection
16:00 - 16:45
The UK is reforming its Data Protection regime with the Data Protection and Digital Information Bill (No. 2). The Bill does not comprise an extensive overhaul of the UK's data protection laws, but rather a set of clarifications and adjustments to provide organisations with greater flexibility over the use of personal data.
Host
- Alexandra Khammud, Senior Information Security Project Manager (Data Protection and Privacy Engineering)
Speakers
- Barry Moult, Owner / Data Protection Consultant, BJM IG Privacy Ltd
- Simon Pillinger, Head of Governance, Ethics, and PPI (DPO), Akrivia Health
- Henry Davies, Data Protection Lead, Likewize
- Angela Potter, Director of Privacy Research, CIPP/E, CIPM
|
| 16:15 |
| 16:30 |
| 16:45 |
| 17:00 |
U.S. Data Privacy laws launch a new era in 2023
17:00 - 17:45
California, followed by Colorado, Connecticut, Utah, and Virginia are enforcing new GDPR-inspired statutes in 2023. With the United States historically allowing businesses and institutions to collect personal information without express consent, this marks a significant shift in data protection history.
Speakers
- Glenn Jackson, CEO, Cassie (Syrenis Ltd)
- Petruta Pirvan, Founder & Legal Counsel, Data Privacy and Digital Law, EU Digital Partners
- Yugo Nagashima, Partner, Frost Brown Todd LLP – US member of the PrivacyRules Alliance
- Odia Kagan, Partner, Chair of GDPR Compliance and International Privacy, Fox Rothschild LLP
- Sean Vargas-Barlow, Principal Lead & Privacy Counsel, ResMed
|
| 17:15 |
| 17:30 |
| 17:45 |
| 18:00 |
Mastering Employee DSARs
18:00 - 18:45
Responding effectively to data subject access requests (DSARs) can be challenging. Complex requests, especially from current or former employees, often require handling a wide range of data (often sensitive) across the enterprise. Whether it’s wading through the review process of thousands of emails, baring the cost of external counsel, or working with IT to ensure you have all the personal data you need from various (tricky to collect / legacy / remote) data sources, employee DSARs can soon become an extremely challenging exercise to fulfil. Join our expert panel to discuss key considerations when responding to employee DSARs and how technology can help fulfil complex requests.
Host
Speakers
|
| 18:15 |
| 18:30 |
| 18:45 |
| 19:00 |
| 19:15 |
