Cybersecurity Law in Practice: Navigating Tradeoffs Across Jurisdictions

Cybersecurity and privacy are no longer parallel disciplines: They are deeply intertwined in ways that force difficult, real-time tradeoffs across the enterprise. This session moves beyond 101 concepts to focus on how legal, security and business leaders actually navigate today’s regulatory and enforcement landscape in practice. 

Drawing on recent enforcement actions (Blackbaud, Marriott, GoDaddy, Nomad), evolving obligations (COPPA 2.0, NIS2, Cyber Resiliency Act and California’s new audit and breach requirements) and shifting SEC expectations post-SolarWinds, panelists will explore how companies and institutions balance compliance, operational resilience and risk ownership. The discussion will highlight the dynamic interactions between legal, CISO/CSO, CTO and HR, particularly in areas like incident response, insider risk and disclosure decision making. 

Attendees will leave with a clearer framework for making defensible, cross-functional decisions amid regulatory fragmentation and enforcement uncertainty.

What you will learn:

• How to navigate tradeoffs between legal compliance and operational resilience, especially during incidents and disclosure decisions.
• How legal, security, engineering and HR interact in practice and where misalignment creates real risk.
• How to build defensible, cross-functional decision frameworks in light of evolving enforcement trends.