IAPP Global Summit 2026: Privacy | AI governance | Cybersecurity law
WASHINGTON, DC
30 March-2 April
Agentic AI and Automation Governance: Practical Controls for Data Risk
Monday, 30 March
15:30 - 16:30 EDT
Intermediate level
In enterprises environments, the biggest automation and AI risk is not “AI hype.” It is unmonitored Python running across endpoints and teams, quietly touching company data through internal APIs, databases, and shared drives. Security and GRC need more than policies. They need real-time evidence of what code is running and what it is doing. This session shares a practical governance approach to reducing data risk without blocking productivity: live inventory of Python execution, behavior visibility, data-touch mapping, and audit-ready reporting. If any business-user code touches company data, you should know.
What you will learn:
• See the real problem: where enterprise automation (often Python) creates data exposure that traditional tools do not make explicit (application programming interfaces, databases, shared drives).
• Implement practical controls: how to move from policy to enforcement with a lightweight governance workflow (discover-understand-assess-report).
• Be audit-ready fast: what evidence auditors and GRC teams need — execution proof, ownership, and data-touch context.
Sponsored by: BotCity
Badge scanning: The IAPP uses Cvent to provide badge scanning services. By allowing IAPP to scan your badge, you are consenting to have Cvent provide the sponsor with your contact information, and thereafter you may be contacted by the sponsor after the event. You may revoke this consent by clicking here or by clicking the unsubscribe link found within the sponsor emails received.
Moderator and speakers

Lorhan Caproni
Co-founder and CEO
BotCity

Rafael Muniz
AI and Digital Intelligence Manager LATAM
Bayer