Privacy and Security of Consumer and Employee Information

About

An ounce of prevention is worth a pound of cure…especially when it comes to privacy protection.

We all understand that the privacy and security of customer and employee data is one of the pre-eminent issues of our time and that the threats can sometimes be overwhelming. But, in today’s world, it is a shared threat. No organization exists in isolation in our technology-driven world, and every entity is reliant on the best practices of others to ensure that all of our customer and employee data is secure.

Every front-page news story about the mishandling of customer data impacts us all; competitors, vendors, partners, affiliates, and clients alike. It goes without saying that we all want to do the right thing by our customers and employees to protect their information. But in order to do so, we all have to ensure that the knowledge is shared, and our practices are benchmarked against each other.

ACI’s 8th National Symposium on Privacy & Security of Consumer and Employee Information will provide privacy leaders with a forum for gaining best practices that will benefit the entire industry. This event is designed to be part learning, part networking and part insurance policy. At the very least, attending this event will ensure that you form contacts and relationships which will prove invaluable when the “worst” should happen. And, by attending this essential event you will:

• Ensure compliance with the latest FTC rules on identity theft and affiliate-marketing
• Protect sensitive information in the hands of third parties through effective vendor management
• Develop a comprehensive international privacy program for the collection, use and transfer of data
• Prevent insider threats from infiltrating your organization and minimize data breaches
• Implement privacy and security policies for a remote and mobile workforce

Contents & Contributors

Regulators and Enforcers Speak Out: New Expectations Created by Emerging Privacy & Data Security Priorities
Betsy Broder, Assistant Director, Division of Privacy and Identity Protection, Bureau of Consumer Protection, Federal Trade Commission
John H. Walsh , Associate Director - Chief Counsel, Office of Compliance Inspections and Examinations, U.S. Securities and Exchange Commission
William H. Henley, Jr., Director, IT Examinations , Office of Thrift Supervision

Managing and Controlling Vendor Relationships Through Proven Methods of Due Diligence and Contract Negotiation
Debra Hampson, Assistant Vice President and Assistant General Counsel, The Hartford
Campbell Tucker, Director of Privacy Office, Wachovia
Molly A. Meegan, Counsel, Skadden, Arps, Slate, Meagher & Flom LLP

Third Party Oversight: Monitoring and Auditing Vendors and Service Providers to Ensure Data Protection
Sharon A. Anolik, Esq., CIPP, Director, Corporate Compliance & Ethics, Chief Privacy Official , Blue Shield of California
Zoe Strickland, Vice President, Chief Privacy Officer, Wal-Mart Stores, Inc.
Frances A. Rao, CIPP/G, Executive Director, Compliance and Ethics Office, Medco Health Solutions, Inc.

Collecting, Using and Transferring Data Overseas: Implementing a Multinational Privacy Program
Orrie Dinstein, Chief Privacy Leader & Senior Counsel – IT & IP, GE Commercial Finance
Fiona Buckley, Records Management Counsel, British American Tobacco (Holdings) Limited

Cost-Effective Approaches for Achieving and Maintaining PCI Compliance
Russell Schrader, Associate General Counsel, Global Enterprise Risk & Chief Privacy Officer, Visa Inc.
JoAnn P. Carlton, Associate General Counsel, Bank of America

Successfully Navigating the Nuances of the Affiliate-Marketing Rule
Anthony Rodriguez, Attorney, Division of Privacy and Identity Protection , Bureau of Consumer Protection, Federal Trade Commission
Lynn Goldstein, Senior Vice President, Chief Privacy Officer, JP Morgan Chase Bank, NA
Andrew Smith, Partner, Morrison & Foerster LLP

Testing Key Systems and Controls to Ensure Compliance with GLB Standards
Marc Loewenthal, Senior Vice President – Chief Security/Privacy Officer, LPL Financial
Nancy Baran, Vice President, Privacy Office, Prudential

What Organizations Need to Know About Insider Cyber Crime
Andrew P. Moore, Senior Member of the Technical Staff, CERT® Program, Software Engineering Institute, Carnegie Mellon University

Remote and Mobile Workforce: Policies, Procedures, and Security Measures for Privacy Protection
Miriam Wugmeister, Partner, Morrison & Foerster LLP

Conducting a Privacy Risk Assessment: Understanding the New Methodology for Putting a Price on Data Security & Compliance
Nancy Callahan, CPCU, CIPP, Vice President, AIG Executive Liability