IAPP ANZ Summit 2026
Privacy | AI governance | Cybersecurity law
Sydney
1-4 December
Engineering Privacy: Operationalizing at Scale and Preventing Privacy Debt
Friday, 4 Dec.
13:30 - 14:30 AEDT
Intermediate level
Privacy programs fail to scale when policy intent does not match engineering execution. This gap creates "privacy debt," where manual processes and compliance-only approaches become unsustainable. This session helps privacy professionals, legal counsel and technology leaders bridge the gap between regulatory intent and technical execution. Practitioners from the IAPP Privacy Engineering Advisory Board and across sectors like design, healthtech and finance will demonstrate how to translate regulatory requirements into technical controls, embed privacy into system architecture, and integrate safeguards throughout the development life cycle. Delegates will leave with actionable strategies for practicing privacy at scale and replacing manual "compliance theatre" with automated, testable controls.
What you will learn:
• How to translate legal and regulatory privacy requirements into testable controls that work in practice.
• Practical strategies to replace manual busywork with automated architectural guardrails throughout the development life cycle.
• Real world lessons and patterns for administering and scaling privacy in production environments.
Moderator and speakers

Willem Balfoort
AIGP, CIPP/A, CIPP/E, CIPP/US, CIPM, CIPT, FIP
Head of International Privacy
Stripe

Marta Ganko
AIGP, CIPP/E, CIPM, CIPT, FIP
Head of Privacy and AI Enablement
Montu

Phillip Ward
AIGP, CIPT
Subgroup Lead, Privacy Engineering
Canva