In 2023 more American organizations than ever need to comply with stricter and wider-reaching requirements for collecting and processing personal data. There are several active state laws and over 30 state bills currently in legislation. Enforcement actions taken at the state and federal level are introducing new requirements and guidelines for privacy programs.   
 

In this session we’ll dive into what you need to know to stay ahead of the shifting US privacy landscape and:  

Lessons learned from CCPA's first enforcement action and investigative sweeps  

Key takeaways from FTCs enforcement on using PHI for advertising and data retention  

A look ahead to AI oversight in the US and how a robust privacy program can extend into this new wave of technology regulation

The Shifting US Privacy Landscape

In an increasingly digital world, ensuring the protection of personal data is paramount. In this session privacy experts shine a spotlight on two of the latest states to join the US Privacy landscape, Oregon and Delaware. Experts will provide an overview of the two new laws, what they mean for your business and how they differ from other state legislation. They also discuss the key requirements of each of these state privacy laws, including the scope, applicability, and compliance obligations.

The road to privacy compliance: A spotlight on Oregon & Delaware legislation

On February 8th, 2023, the International Organization for Standardization (ISO) adopted Privacy by Design as ISO 31700. With 30 requirements, the standard includes guidance on designing capabilities to enable consumers to enforce their privacy rights, assigning relevant roles and authorities, providing privacy information to consumers, conducting privacy risk assessments, establishing and documenting requirements for privacy controls, how to design privacy controls, lifecycle data management, and preparing for and managing a data breach. 

Speakers from the Product team and Privacy Center of Excellence at OneTrust dive into ISO 31700 Privacy by Design guidelines and how to implement privacy by design for your business.  

Key takeaways: 

Overview of ISO 31700  

Key considerations for implementing a PbD framework for your organization  

A look at OneTrust’s Privacy by Design solutions

Privacy by Design becomes an ISO standard

On July 1, 2023, privacy laws in Colorado and Connecticut entered effect. While the laws carry many similarities to other state laws already in effect, there are nuances that introduce new requirements for US Privacy compliance programs.   
 

Watch this session to learn about the new laws in effect, how to comply and:  

Key requirements of Colorado’s CPA and Connecticut CTDPA   

How these laws compare with other state laws in effect or waiting to go into effect  

Operational considerations for organizations that fall under scope

Now in effect: Colorado and Connecticut Privacy Laws

The topic of international data transfers has been a contentious subject since the Court of Justice of the European Union (CJEU) rules on the Schrems II case, invalidating the EU-US privacy shield and changing the way organizations manage persona data transfers overnight. Beyond the question of legality between transferring data between the US and the EU, data transfers are brought to the forefront in other regulatory updates including the UK Data Protection Bill, China’s PIPL, Canada’s PIPEDA, UAE’s PDPA. 
 

To effectively manage data transfers and mitigate risk of non-compliance with respect to global data transfer requirements, organizations need to document, assess, and mitigate the risk of data transfers, and provide consumers with notice and choice to share data with third parties. Join OneTrust product and customer success experts for a look at the latest features and enhancements for managing data transfers. 

Key takeaways: 

A look at recent enforcement actions and regulatory activity impacting data transfers in the EU and US 

Key requirements for managing data transfers holistically 

A demonstration of OneTrust’s latest data transfer management enhancements

Managing Data Transfers

Several new states have signed privacy legislation in 2023 including; Indiana, Montana, Tennessee, Texas, and Florida. Watch this on-demand webinar for an overview of the new laws as privacy experts discuss key requirements, including the scope, applicability, and compliance obligations.

Preparing for Indiana, Montana, Tennessee and Florida state privacy laws

OneTrust

Privacy

Data Privacy

Data Laws

Data Applications

Data Compliance

Compliance

Compliance Regulations

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Preparing for Indiana, Montana, Tennessee and Florida state privacy laws

Presented by

About this talk

More from this channel