RadarFirst Blog

Highlights from the IAPP DPC Conference: Global Regulatory Challenges in Privacy

Here in the US, the winter holidays kick off with Thanksgiving. And as I digest my turkey dinner, I'll also be digesting the many issues and ideas presented at the 2019 IAPP-Europe Data Protection Congress in Brussels. 

Read more

Healthcare Privacy Concerns: Balancing Patient Care and Compliance

Last week during the regional Health Care Compliance Association (HCCA) conference in Nashville, I was lucky enough to host a gathering of executives from privacy and compliance for a private executive dinner with Adam Greene, an influential thought leader in privacy and partner with Davis Wright Tremaine. Adam moderated a robust discussion that explored HIPAA and OCR enforcement trends, the growing divide between state consumer protection laws and Federal regulations, and speculation on what the future holds for healthcare companies in an increasingly fractured consumer protection landscape.

Read more

5 Hot Topics from the PrivSec Conference in New York

Traditionally, privacy and security have been poles apart. We’ve seen an increased effort in the industry to align these two functions, especially as heavyweight regulations like GDPR and CCPA become effective. This week’s 2019 PrivSec Conference at Columbia University in New York seeks to further unite privacy and security with two days of inspiration and instruction from industry leaders. 

Read more

Preview: 5 Can’t-miss sessions at IAPP P.S.R.

The 2019 IAPP Privacy. Risk. Security. conference is only a few days away, and there will be a lot to discuss as leading minds in the privacy field gather in Las Vegas to establish and share best practices. 

Read more

Three Topics We’re Following at the 2018 IAPP Privacy. Security. Risk. event in Austin

Next week, 1,600+ privacy professionals are heading to Austin for the annual IAPP Privacy. Security. Risk. conference. The educational opportunity and discussions happening at this conference every year surfaces new ideas, best practices, and top challenges for the privacy profession. 

Read more

The Human Side of Privacy: 2018 IAPP Global Privacy Summit Recap

For those tasked with the daily, detailed work of ensuring their organizations’ compliance with data breach notification regulations–particularly in light of the complexity of preparing for new regulations to go into effect, namely GDPR–it could be easy to forget the person in personal data. Speakers from this year’s IAPP Global Privacy Summit reminded us of just how reductive that vantage point can be, touching on the very human element that lies behind every privacy incident.

Read more

Regional Support and Innovation Showcase at Portland Startup Pitch Event

In December I had the pleasure of acting as emcee for Pitch Oregon 2017, an annual event hosted by TiE Oregon featuring regional early stage startup entrepreneurs pitching in front of a panel of judges for cash and investment opportunities. I’ve been involved in the entrepreneur scene in Portland for more than a decade, both as a mentor and volunteer and as an employee at start-up and growth stage companies. This event serves as a great representation of what the region has to offer, and the role that leaders at startups and established enterprises can have in fostering opportunities for budding organizations.

Read more

Can't-Miss Sessions at IAPP Privacy. Security. Risk. 2017

Privacy and security teams are often painted as adversaries in compliance. While it's true that privacy, security, and risk professionals often come from different backgrounds and interests, they are united in their shared pursuit of compliance and events like the IAPP Privacy. Security. Risk. 2017 illustrate the way these fields are converging. 

Read more

Upcoming Webinar: GDPR and Incident Response

The clock is ticking - the deadline to comply with the General Data Protection Regulation (GDPR) is now less than a year away, and having an incident response plan in place and ready to implement should be a primary item on your preparation checklist. With notification timelines of 72 hours, and fines that could reach 4% of global annual revenue, the risk of noncompliance is significant.

Read more

Shared Perspectives on Data Breach Response and Compliance

Last week I had the opportunity to bring together many perspectives in the incident response management process and discuss our shared challenges, our best practices, and how we can better work in unison.

Read more

Privacy Statistics & Figures: Quantifying Incident Response at the ISACA Pittsburgh Information Security Conference

I recently had the opportunity to travel to Pittsburgh for the 2016 ISACA Pittsburgh Information Security Awareness Day Conference. This conference is part of a regional series hosted by the local ISACA Pittsburgh chapter.

Read more

Five Tips for Incident Response Readiness, from the IAPP 2016 Practical Privacy Series

Last week I attended the IAPP Practical Privacy Series in Washington, DC. This series features intensive educational sessions designed to arm those in the privacy field with the up-to-the-minute knowledge needed to excel on the job. My fellow attendees were privacy officers and others who were well versed in privacy issues – many interesting conversations were started in the hallways between sessions and during meals.

Read more

IoT, Infosec Trends, and International Privacy Law

Notes from the Privacy + Security Forum in DC

This year I was able to attend the Privacy and Security Forum for the first time. Organized by Daniel Solove and his TeachPrivacy organization, this informative event showcased the deep knowledge of the privacy, security, legal, and compliance speakers and attendees. Everyone at the forum exhibited an obvious passion for their work with their evident enthusiasm for learning and sharing knowledge.

Read more

Operationalizing Data Breach Policies and Processes in a Healthcare Setting

According to a May 2016 report from the Brookings Institution, 23% of all reported data breaches occur at healthcare organizations.

Read more

IAPP members: Join us for this Webinar

Cyber-attacks, ransomware, spear phishing, malware, system and process failure, employee mistakes or negligence, lost or stolen devices… the list goes on and on.

Read more