Privacy 2.0: Uncovering What's Next for Data Privacy | DataGrail Summit

Privacy 2.0: Uncovering What’s Next for Data Privacy

Panelists:

The only constant in data privacy is change. New global and U.S. privacy laws emerge and evolve constantly. Consumer expectations are high, and their privacy knowledge is maturing. Join leading privacy experts to unpack major business concerns, trends, and shifts companies should be aware of in the rapidly evolving space.

Introduction

Ryan O'Leary (00:12):
Thanks for joining us today. I appreciate it. As Mary said, I'm Ryan O'Leary from IDC.

Anna Westfelt (00:50):
My name is Anna Westfelt, partner at Gunderson Dettmer heading the data privacy group.

Rick Arney (01:30):
I'm Rick Arney, co-author of CCPA and CPRA and also involved in multiple initiatives regarding privacy laws in California.

Current Landscape of Data Privacy

Ryan O'Leary:
Before we explore Privacy 2.0, we need to understand current challenges in Privacy 1.0 based on a survey I did. The biggest challenges include:

  1. Driving regulatory compliance without hindering revenue generation.
  2. Managing a variety of regulatory frameworks.
  3. Organizations lacking an understanding of where their data is, leading to higher risks.

According to IDC statistics, 95% of enterprise data is unstructured, making management of sensitive data difficult.

Data Subject Access Requests

Ryan O'Leary:
The data subject access requests have dramatically increased, yet there's a lack of enforcement on their management. We're seeing an increase in requests per month as organizations struggle to handle them.

Anna Westfelt:
While we haven't seen much enforcement on DSARs, the potential for future inquiries keeps many up at night. Organizations need to prepare adequately, starting from their financing stages.

Compliance Drivers

Rick Arney:
The budget for California’s CPPA is currently being established, and this marks the early days of enforcement. We're working towards assuring strong regulatory action to support data privacy.

Industry Pressure & Cybersecurity

Anna Westfelt:
Companies must ensure they comply with privacy regulations, or they risk losing customer trust. Cybersecurity also plays a pivotal role in this – a lot of clients are often caught in uncomfortable contractual situations, promising indemnity against breaches they may not be able to control.

The Future of AI in Privacy Regulation

Ryan O'Leary:
Generative AI is revolutionizing the landscape, and there's a challenge in managing privacy considerations under regulations.

Rick Arney:
The CPRA inadvertently positions the agency as a lead regulator for AI, emphasizing the need for regulations governing automated decision-making technology.

Key Takeaways

Rick Arney:
Basic compliance regarding DSARs and vendor management is crucial. Organizations must also be proactive in their cybersecurity measures.

Anna Westfelt:
Organizations are looking for clarity and harmonization in data privacy laws to navigate the various state regulations.

Thanks to our panelists and to DataGrail for organizing this discussion.