AGENDA

Transferring personal data out of “adequate” GDPR jurisdictions is arguably the most complex and time-consuming problem in data protection, particularly since the invalidation of the “Privacy Shield” framework in June 2020.

Even with fresh guidance from the European Data Protection Board (EDPB) and a new sets of standard contractual clauses, many unanswered questions remain.

There has been a flurry of regulatory activity against controllers using common tools like Google Analytics, Zoom and Stripe.This means hundreds of thousands of companies are potentially exposed to the risk of enforcement action.

PrivSec Risk In Focus will speak to experts on data transfers and senior data protection professionals to discuss the steps your organisation should be taking to mitigate the risk of unlawful data transfers under the GDPR.

Host

• James Drury-Smith, Partner, DWF Law

Speakers

• Anne Joséphine Flanagan, Data Policy & Governance Lead, Centre for the Fourth Industrial Revolution, World Economic Forum
• Lori Baker, VP, Legal & Director of Data Protection, DIFC
• Manisha Aurora, Global Privacy| CIPM | CIPP-US| CIPP-E| CIPM| CA & India Bar Licensed | Privacy | Security | Technology Transactions at Verizon, Global Privacy Legal Advisor, Axiom
• Scott A. Warren, Partner, Squire Patton Boggs
• Juhamatti Järvi, LL.M.; Senior Legal Counsel Data, Digital and IP, Zurich Insurance Company Ltd

Much of the work of security professionals focuses on securing an organisation’s perimeter and keeping malicious actors out.

But whether through maliciousness or negligence, insider threats are a common cause of data breaches and security risk.

PrivSec Risk in Focus will take an in-depth look at how leading organisations manage the risk from insider threats—and how you can build an effective and systematic insider threat programme.

Host

• Richard Merrygold, Director & Co-Founder, iSTORM® Privacy-Security-Pentesting

Speaker

• Noemí Alonso Calvo, Managing Partner/Principal Privacy Consultant, The Privacy ACES, GmbH
• Alexis Perdereaux-Weekes, CISA, CISM, CRISC, Msc, Associate Reserch Fellow, Americas Institute for Cybersecurity Leadership
• Jonathan Craven, Privacy and Compliance Lead, iRhythm Technologies Ltd
• Idayat Ibraheem, Cybersecurity Compliance Global Black Belt | EMEA, Microsoft
• Joseph MacMillan, Senior Technical Specialist for Cybersecurity EMEA - Advanced Compliance, Microsoft

Organisations worldwide have navigated some extremely difficult waters over the past few years, with the pandemic showing just how quickly and dramatically organisational risk can change.

But while many companies have failed, others have come out stronger—and with a renewed appreciation for the importance of organisational resilience.

PrivSec Risk in Focus will consider the best practices for managing overall organisational resilience and ask risk management experts what they’ve learned from the past few chaotic years.

Host

• Annick O’Brien, COO, Cybsafe

Speakers

• Bill Mew, Founder and CEO, Crisis Team
• Magdalena Avanesian, CIPP/e, BSc. LL.B., Founder, Legal Counsel & Privacy Officer, The Tech Lawyer
• Glen Hymers, Head of Data Privacy and Compliance | Data Privacy and Compliance Team | CDIO Directorate, Cabinet Office

Conducting due diligence on prospective third-party providers is a vital part of ensuring compliance and lowering risk exposure.

The due diligence process can be resource-intensive, but getting this crucial part of third-party risk management wrong can be disastrous for your business and its stakeholders.

PrivSec Risk In Focus will explore best-practice tips to help systematise and prioritise your company’s third-party due diligence process.

Host

• Joel Schwarz, JD, CIPP, CDPSE, Director & Data Protection and Privacy Capability Lead at MBL Technologies Inc., and Adjunct Professor of Law, Albany Law School

Speaker

• Angelica Gutierrez Navarro, Data Privacy Manager, PepsiCo
• Constantine Karbaliotis, J.D., CIPP C/US/E, CIPT, CIPM, FIP, CDPSE, Counsel, nNovation LLP
• Wisdom Aveh, Security & Privacy Consultant, Perceptive Risk

Forget Terminator 2 or The Matrix: The real AI risks today lie in discrimination, bias and automated errors—together with the lawsuits, enforcement action and reputational damage that could result.

Automated AI systems are driving efficiency and effectiveness in millions of businesses. But regulators are drawing up new rules on automated decision-making, and the public is increasingly aware of the inherent bias that machine-learning systems can exhibit.

PrivSec Risk in Focus will consider the main risks presented by AI systems and explore best-practice tips to mitigate them.

Host

• Caro Robson, MBA, LLM, FIP, Senior Consultant Legal Advisor, Data Protection & Technology, Milieu Consulting

Speakers

• Federico Marengo, Data Protection Consultant, Qubit Privacy
• Odia Kagan, Partner and chair of GDPR Compliance and International Privacy, Fox Rothschild LLP
• Maria Fernanda Hosken Perongini, Privacy & Data Protection Consultant, UnitedHealth Group
• Joseph Davis, Chief Security Advisor, Microsoft