Big Data, Analytics, and Enterprise Privacy

2020 represents a major shift in Enterprise Privacy. Through a series of breaches and data mishaps, the public has realized how ubiquitous their personal data has become and the risks of dissemination or breach. GDPR and CCPA mark the first major legislation to introduce opt-out options for consumers and major fines for violators.

January 1, 2020, marks the first data for which companies must comply with the California Consumer Privacy Act (CCPA) or face potential litigation. To date, most enterprises have been waiting on the sidelines for clarity around the law. However, waiting is no longer an option.

Organizations must proactively cultivate new opportunities or face impending compliance nightmares and emergent legal and reputational risks. To intelligently navigate the landscape, this Event presents experienced thought leaders across multiple disciplines – privacy officers, business leaders, and technologists – to provide forward-looking, authoritative and pragmatic guidance for an effective transition to Enterprise Privacy 2.0.

(CLE Credit: 3.0 credits pending for NY and NJ)

Agenda

• 9:00 am – Registration & Networking
• 9:30 am – Opening Remarks
• 9:40 am – Big Data: Digital Ecosystems and Platforms
• 10:30 am – Break & Networking
• 10:45 am – Privacy Law 1.0: GDPR
• 11:35 am – Break & Networking
• 11:45 am – Privacy Law 2.0: CCPA
• 12:35 pm – Lunch
• 1:35 pm – Enterprise Data Governance
• 2:25 pm – Operationalizing Tech for Compliance
• 3:35 pm – Balancing Data needs and Privacy Concerns
• 3:55 pm – Closing Keynote

Speakers

Keynote: Andrew Zwicker – NJ Assemblyman 16th Dist.

Chair of the General Assembly’s Science, Innovation, and Technology Committee. Zwicker has introduced the disclosure and opt out law (A4902). Assemblyman Zwicker holds a Ph.D in physics and heads communications at Princeton University’s plasma physics lab.

Renata Lowenbraun – VP, Legal – Privacy & Product at Payfone

Responsible for IP and complex privacy matters at the leading provider of mobile authentication and ID solutions. Previously served as a commercial litigator in the casino gaming and record industry.

Xinping Zhu – VP, Legal and Compliance at Morgan StanleyLegal executive with accountability for cybersecurity, privacy and data protection at one of the world’s leading investment banks. Previously at Covington & Burling focused on IP and tech law.

Howard Israel – CISO at Fireeye / Mandiant

Internationally recognized CISO, 37-years InfoSec veteran, author of one of the earliest computer virus papers. Led data breach and loss recovery programs at NSA, Bell Labs, and J&J.

Julia Mehlman – Privacy Counsel at Pandora

Nexus of privacy and commercial transactions. Julia is responsible for protecting the privacy of over 75M+ active listeners. She has handled legal matters COPPA, TCPA, VPPA, HIPPA, GDPR, and CAN-SPAM.

Mark Gilman – General Counsel at Theta Lake

Technology attorney and compliance executive with fifteen years of law, financial services, and IT experience. Professor at Fordham Law and previously executive director at Morgan Stanley.

Seth Litwak – Privacy Counsel at Interpublic Group

Handles privacy matters for a $9B advertising giant. Certified as CIPP, CIPT, and CIPM. Previously served in the privacy office at JP Morgan.

Nadia Daley – Privacy Counsel at Content Square

On a mission remove all personally identifiable information (PII) from their data repository. Previously served on the privacy team at PWC and co-chair of IAPP.

Yuri Rusko – CEO at phpBB

Open-source pioneer and a regular speaker on data privacy. Founder of the largest open-source bulletin board platform on the php codebase.

Tahmina Rajib – Director, Corporate Compliance

Dynamic and passionate compliance leader with drive to embrace change using innovation and process efficiencies. Tahmina has previously held compliance roles at AIG and MetLife.

Praful Dixit – Partner at Dixit Advisors

Information security risk management and compliance executive. Former SVP of compliance risk management at Citibank. Supported Sox, GLBA, PIC, NIST, and ISO compliance.

Pankaj Faujdar – Senior Principal at Infosys

18-year veteran in Data governance and technology delivery. Leader of the data privacy practice that has worked with HSBC, BNY, Chase, and Capital One to transform technology programs.

Harsh Mody – CEO at MDS

Insurance innovator building an AI fraud management platform. Previously, Harsh served as the lead investigator for fraud at New York Life Insurance.

Sofiat Abdulrazaaq – COO at Goodfynd

Entrepreneur, product, marketing, and strategist for the gig economy. Founder of a platform to connect local food trucks. Former Senior Project Manager at United Way

David Gritz – Founder of InsurTechNY

Startup advisor with a track record helping startups go from Seed Stage to Series A. David runs events for the insurance industry on AI, Data and Analytics, and Ecosystems and Platforms.

David Friedman – Founder of PrivacyTechNY

Experienced contracts and privacy attorney. David has served as an in-house contracts attorney at NYU Hospital and Thomson Reuters.

Brett Smith – Founder of BlackBearLife

Insurance expert, entrepreneur, and management professional with over 23 years of experience in the insurance and financial services. Building a data-centric startup life insurance carrier.

Session Details

SESSION 1: Big Data: Digital Ecosystem and Critical Mass
9:40 a.m.
Data collection is now a ubiquitous feature of daily life – mobile apps, financial transactions, social activities and entertainment, the IoT, etc. – have created a new environment. Industry depends upon this “Big Data” for marketing, decision-making, and operations. This session will cover:

• The acceleration of data collection and the rise of intelligent processing.
  The value-enhancing technologies that are driving the new generation of data-dependent business enterprise.
• The business models and the economic and political use cases of information.

SESSION 2: Privacy Matters. Policy and Privacy Law from 1.0 to 2.0
10:40 a.m.
While the tech economy is producing unprecedented productivity, efficiency, and convenience, it is also testing the limits of acceptability with regard to the propagation and commercialization of our personal information. In this session, we explore insightful and thought-provoking answers to these questions:

• How do we define “privacy” and who owns your data?
• How do we balance tech innovation against personal privacy interests?
• What are the foundational ethical and legal bases, upon which to craft the appropriate policy and law?

SESSION 3: The EU’s General Data Protection Regulation (GDPR)
11:40 a.m.
The law of the land in the EU member states since May 2018 has been the GDPR – the precursor to the “2.0” laws in the United States. To date, there have been 12 major actions representing almost € 360 million in fines. In this Session:

• The GDPR Requirements: an authoritative overview of the most comprehensive legal framework.
• Detailed examination of major features including consent requirements, rights to deletion and rights with respect to profiling.
• Examination of the major EU enforcement actions

SESSION 4: “California, Happy New Year 2020”; the CCPA
1:30 p.m.
On January 1st, California residents enjoy new rights – and businesses have new obligations to contend with. What started as a grassroots movement for a data privacy referendum quickly evolved into major deliberations between lawmakers, privacy activists, and the tech industry – and eventually new law. This session will cover:

• CCPA Requirements: An authoritative overview.
• Detailed explorations of “Opt-Out”, requests for information, requests for deletion, verifications and the slippery-slope of non-discrimination and incentives.
• Insights into the newly-introduced (prospective) regulations.

SESSION 5: Compliance Programs: Practical Guidance for Managing the New Information Law Requirements.
2:20 p.m.
Major regulatory change means organizational change. Compliance counsels and technology officers provide guidance on regulatory compliance challenges and opportunities. In this Session:

• Updated compliance program to reflect organizational priorities and objectives.
• Privacy Policies and internal organizational controls.
• Addressing the concerns of leadership and regulators.

SESSION 6: Data Governance: Practical Guidance for Data Inventory, Security and Identity Verification
3:20 p.m.
The key to the effective transition to Privacy Law 2.0 is effective data governance: This Session will cover:

• Data Inventory, Data Mapping and effective “Data Lifecycle” programs.
• Information Security.
• Consumer verification and the use of technologies, tools, and resources for data governance.

Keynote: NJ State Assemblyman Andrew Zwicker
3:50 p.m.

• Lawmaker insights into emerging state and federal laws of information privacy.
• Perspectives on the development of a regulatory framework for consumer data.
• Status on current NJ laws and information about the NJ state lawmaking process.