Next-Generation Technologies & Secure Development , Threat Detection

Demystifying Data Sovereignty: Navigating Privacy Compliance in a Global Context

Joe Emerson , Brian McDonald , Arnold Park , Nicholas You • May 7, 2024

This session explores the impact of data sovereignty and localization on corporate privacy programs. Gain insights into how one country’s jurisdiction over data can shape compliance frameworks and operational strategies amid stringent privacy laws and enforcement. The discussion will address aligning your data practices with global regulations, managing cross-border data transfers and adopting essential best practices for robust privacy programs.

This session is crucial for privacy and security professionals seeking to adeptly navigate the complexities of data governance in a rapidly evolving global regulatory landscape.

Key Takeaways:

Understand data sovereignty and localization: Gain an understanding of how data sovereignty and data localization impact global compliance efforts, emphasizing the importance of recognizing each country’s sovereignty over data.
Navigate global regulations: Learn effective strategies for navigating the complexities of varying global privacy regulations and how to manage compliance challenges associated with cross-border data transfers.
Manage privacy programs: Discover best practices for developing and maintaining robust privacy programs that are resilient against the rapidly changing landscape of data governance, helping to avoid costly fines and enhance data security.

Previous
Earning Customer Trust Through Experience: Shielding Against Threats

Next
Ransomware Attack Shuts Down Kansas City Systems

About the Author

Joe Emerson

Managing Director, Security and Privacy, Protiviti

Joe Emerson is a Managing Director, a leader in Protiviti’s Data Protection and Privacy practice, and a privacy subject matter expert with comprehensive knowledge of privacy and compliance requirements to strategize, develop and deliver complex privacy and compliance solutions for some of the world’s largest and most innovative companies. This has included serving, on numerous occasions, as an independent assessor pursuant to FTC consent orders, acting as a HIPAA compliance officer and privacy officer for major corporations and government agencies, managing privacy regulation readiness and compliance assessments, and collaborating to develop, implement and ensure the ongoing success of solutions within organizational privacy programs.

Brian McDonald

Senior Manager, Security and Privacy, Protiviti

Brian McDonald is an experienced leader focused on data risk, privacy, security, and governance. He has 25 years of work experience that includes providing management and oversight of global data privacy / governance programs, assessments, audits, remediation, and management action plans for large multinational organizations across a wide variety of industries. He has led information governance engagements and privacy & security assessments for complex enterprises, working with general counsel’s offices, Chief Risk Officers, audit committees and IT departments to improve risk postures resulting from privacy mandates and security imperatives.

Arnold Park

Senior Manager, Legal Consulting, Protiviti

Arnold Park is a Senior Manager in Protiviti’s Legal Consulting practice. He advises clients in data privacy, AI governance, risk management, and complex litigations and investigations. He has led engagements assessing legal risk, identifying gaps between current and future state compliance objectives, and providing recommendations to remediate identified vulnerabilities. Arnold’s combined background in technology and law enables him to effectively collaborate across highly matrixed organizations to develop transparency, trust and robust solutions to complex compliance challenges.

Nicholas You

Associate Director, Legal Consulting, Protiviti

Nicholas You is an Associate Director with Protiviti Legal Consulting. As an emerging legal risk consultant, Nicholas focuses on building organizational trust in the digital age, advising general counsel, boards and legal executives of global companies to effectively manage their data assets and harness emerging technologies. He interprets complex and multifaceted legal risk issues and translates concepts into tailored business practices that enhance transparency and accountability. Nicholas conducts risk assessments, develops governance frameworks, and architects’ holistic programs that foster stakeholder trust.