Every year, legislatures and regulatory agencies create new data privacy and security laws that affect businesses and government agencies. In North America, the proposed Canadian Consumer Privacy Protection Act (CPPA) is being reviewed as a replacement for PIPEDA, while overseas new data protection regimes have gone live in the Middle East or will do so shortly.
Data discovery and classification (DDC) is the process of locating controlled information throughout an institution’s information ecosystem, labeling it according to its sensitivity or other criteria, and electronically tying those labels to the data classification policy and associated controls.
In this interactive presentation, a data protection attorney will take a deep dive into DDC and demonstrate how to meet a wide variety of data privacy and security requirements. Said another way, it’s a compliance Swiss army knife. Takeaways include:
• Understanding the principles of data discovery and classification (DDC)
• Discovering how to transform “paper only” data classification policies into electronic ones
• Learning how to rationalize and meet multiple compliance requirements using DDC
Scott M. Giordano, Esq., V.P., Corporate Privacy, and General Counsel, Spirion
Scott M. Giordano is an attorney with more than 20 years of legal, technology, and risk management consulting experience. An IAPP Fellow of Information Privacy, a Certified Information Security Systems Professional (CISSP), and a Certified Cloud Security Professional (CCSP), Scott serves as Spirion’s subject matter expert on multinational data protection and its intersection with technology, export compliance, internal investigations, information governance, and risk management.
Prior to joining Spirion, he served as Director, Data Protection for Robert Half Legal and established the global privacy program for Esterline Technologies Corporation in Bellevue, WA.
During his career, Scott has held senior positions at several legal technology firms and is listed as co-inventor on Intelligent Searching of Electronically Stored Information, patent no. 13/842,910. In addition, he taught the first law school course anywhere on electronic evidence and e-discovery.
Scott is a member of the bar in Washington state, California, and the District of Columbia.