Privacy Programs on Trial and Incident Response Under Fire

This session is part of the Think Tank series. Think Tank sessions are 45-minute breakouts with a 15-minute question and answer sessions where experts in law and consultancy share their expertise on relevant and thought-provoking topics.

Privacy and cybersecurity lawyers spend years debating consent, disclosures, SDKs, sensitive data, data minimization, and vendor relationships. But what happens when those abstractions must survive experts, faded memories, cross-examination, and a verdict? Drawing lessons from one of the rare major consumer privacy class-actions to reach trial (the Flo Health litigation), this session examines how privacy-related decisions show up in a courtroom — and which ones suddenly matter much less. Applying a similar framework to incident response, speakers will discuss the real-life operational, legal, and business tensions that can lead to unexpected behaviors and outcomes in high-stakes incident response, so that breach response materials and communications don't become harmful exhibits in the litigation or regulatory investigation that follows.

What you will learn:

• Why personal data will be increasingly valuable moving forward.
• Practical lessons derived from having to defend a privacy program with a judge and jury.
• Best practices to reduce legal risk, while enabling the operational collaboration necessary to respond to the incident, manage customer relationships, and develop external communications, particularly when navigating a high-stakes data breach or business-disrupting incident.

Sponsored by Dechert

Badge scanning: The IAPP uses Cvent to provide badge scanning services. By allowing IAPP to scan your badge, you are consenting to have Cvent provide the sponsor with your contact information, and thereafter you may be contacted by the sponsor after the event. You may revoke this consent by clicking here or by clicking the unsubscribe link found within the sponsor emails received.