RAIDERS OF THE DATA ARK
DATA PRIVACY & CYBERSECURITY SUMMIT
Practical Tips and Legal Risks
October 16, 2014
8:00 AM - 2:00 PM
Crowne Plaza
Cromwell, CT

Shipman & Goodwin LLP Counselors at Law
SHRM – Society for Human Resource Management
And CT SHRM – Connecticut Society for Human Resource Management

Shipman & Goodwin and Connecticut (SHRM) Human Resource Council are pleased to present a unique conference focusing on Data Privacy and Cybersecurity, with an emphasis on practical tips and legal risks for Connecticut companies and their employees.  With “speed of light” advances in technology, data privacy and cybersecurity are no longer just issues for IT consultants. Recent data breaches at large companies such as Target have made “data breach” a household phrase. Occurrences of industrial espionage, data pilferage and data breaches are increasingly common, and pose real threats to organizations’ profitability and operational productivity. The implications for management, employee relations and business risk cannot be overstated. 

With these new challenges should come new solutions, along with continuous vigilance when it comes to technology in the workplace. Employing a well-thought-out strategy – particularly about data held by or about your company’s employees – will reduce an organization’s vulnerability in the global marketplace.

What’s been missing in many programs analyzing these issues is a comprehensive approach that brings company leaders, human resources professionals, and attorneys together to provide practical tips for developing a workplace where data privacy is valued, recognized, emphasized and practiced.  Operations personnel, in-house counsel, human resources professionals, general managers and finance managers will learn solution-oriented approaches to data privacy and cybersecurity issues. 

Key takeaways include:

Bullet History of corporate cyber-crime and data breaches: What’s worked and what hasn’t
Bullet Internal and external threats to data
Bullet HR implications for management and personnel – best practices to protect your data
Bullet Data privacy case law, cybersecurity and employee practices
Bullet Proven strategies and program templates for securing data networks 
Bullet What to do in the first 72 hours following a breach
Continental breakfast and lunch will be served.

Registration:
http://tinyurl.com/mrou74o or scan the QR code. If you have questions, please feel free to contact Andy Thiede, cthrshrm@aol.com or 860-202-8107.

Fee:
Registration fee is $75 per person, payable in advance of the event, and includes meals, materials and parking.

Payment: 
1) Online via credit card at time of registration or 
2) Submitted via US mail by October 13th to: Connecticut HR Council, PO Box 7372, Berlin, CT 06037

HRCI Credits:
Recertification credits are pending for this event.

AMEX, Discover, MasterCard and Visa accepted

Conference Agenda
Conference Registration and Continental Breakfast - 8:00 - 8:30 AM
General Sessions
Are We Headed to the “Temple of Doom?” Data Privacy, Past, Present and Future  - 8:30 - 9:00 AM

This plenary session and conference opening will give a brief overview of data privacy…where we are now, how we got here and what to expect. The following will be discussed:

Bullet Brief and recent history of data privacy and cybersecurity
Bullet “Hot Topics:”  Technology, Communication, and Management
Bullet Implications for the Workplace
Bullet The Future?
Speakers: Daniel A. Schwartz, Data Privacy and Employment Law Attorney, Shipman and Goodwin LLP;
Marc Kroll, Co-Director, Professional Development, CT Human Resource Council (CT SHRM) and Managing Principal, Comp360 LLC

“How to Train Your Dragon:” Practical Tips From Company Leaders - 9:00 - 10:00 AM  

The threats to a company’s data are real and growing: while it may not breath fire, the threats are persistent.  This panel will discuss, from the corporate perspective, how best to protect your organization, including:

Bullet Identification of areas of exposure
Bullet Best practices in communication and policy development
Bullet Protection of employee data
Bullet Training employees and ensuring followup in the workplace
Bullet Employer/Employee relationships redefined: expectations and execution 
Speakers: Andrea Barton Reeves, President/CEO, HARC; Christine K. Sadlouskos, Executive Compliance Leader, Privacy & Data Protection, General Electric Company; Moderator:  Catherine Intravia, Data Privacy Law Attorney, Certified International Privacy Professional, Shipman & Goodwin LLP

Break and Networking - 10:00 - 10:15 AM

“The Good, The Bad, and The Ugly:” Legal Risks and Solutions for Today’s Workplace  - 10:15 - 11:15 AM

It’s happened. You believe your company’s data has been breached.  You need a crash course on the legal implications and the steps your company must take immediately.  This session will cover:

Bullet The changing landscape of legal rules and regulations
Bullet Understanding key laws and the coverage of government agencies involved in data privacy matters
Bullet What to do in the first 72 hours following a breach
Bullet Legally protecting your data: Confidentiality agreements, restrictive covenants
Bullet Overview of tips and tools to help protect your company 
Speakers: Matthew F. Fitzsimmons, Chair, Privacy Task Force, Assistant Attorney General; Connecticut Attorney General’s Office; Martin McBride, Supervisory Special Agent and Cyber Squad Chief, FBI New Haven Field Office; Speaker and Moderator:  William Roberts, Data Privacy and Health Law Attorney, Shipman & Goodwin LLP

Break and Networking - 11:15 - 11:30 AM

Breakout Sessions - 11:30 AM - 12:30 PM – choose one
“For Your Eyes Only:” The “Skyfall” Effect Data Privacy and Malicious or Inadvertent Cyber Activities Have On Multi-State and International Companies 

This session will focus on the evolving world of cyber risks and how they relate to data privacy and security.  We will include expert discussion on both malicious and “well-intentioned” but careless cyber activity, current exploitation techniques, and the impact on multi-state and international companies.  Panelists will discuss issues ranging from:

Bullet The applicability of U.S. and international (EU) data privacy laws and regulations
Bullet The evolving privacy and cybersecurity risks
Bullet The mitigation and response resources available to combat cyber risks
Bullet The changing way we look at data breaches and the insurance perspective
Bullet Cybersecurity best practices for multi-state and international companies 
Speakers: Dan Robertson, Vice President, Network, Support & Services, ESPN, Inc.; Robert O. Barberi, Jr., Assistant Vice President, FINEX North America, Willis Americas Administration, Inc.; Joseph P. Dooley, Chief Executive Officer, JPD Forensic Accounting, LLC; former Supervisory Special Agent, FBI; Sabrina Houlton, Assistant General Counsel,  International Trade Compliance for UTC Aerospace Systems;
Moderator:  T. Scott Cowperthwait, Data Privacy and International Trade Law Attorney, Shipman & Goodwin LLP

“The Fault in Our Stars:” Why Cybersecurity is Critical for Smaller Companies and Non-Profits 

While media coverage on data issues tends to focus on large company breaches, cybersecurity is critical to organizations of any type and size.  Even basic data security measures could deter a breach, and with so many other unprotected targets available, the hackers may just move on. With fewer resources to devote to the issue, it’s important for smaller companies and non-profits to get it right the first time.  In this session, we’ll focus on:

Bullet How to make data privacy and cyber threats, both internal and external, more real to employees
Bullet Management practices – business and HR policies in a data secure environment
Bullet Practical strategies to prioritize threats with limited resources
Bullet Is there such a thing as a “small” data breach?

Speakers: Brian Kelly, Director of Information Security, Quinnipiac University; Marie Mormile-Mehler, MSW, VP of Planning & Performance Improvement, Community Mental Health Affiliates, Inc.; Cathy Denault, VP of Human Resources, Community Mental Health Affiliates, Inc.; Mike Wanik, Director, Corporate Security, United Therapeutic Corporation; Moderator:  Linda Ferraro, Principal, Valency Consulting, Co-Director, Professional Development, CT Human Resource Council (CT SHRM)

Break and Lunch - 12:30 - 1:00 PM

Keynote: “Catch Me If You Can:” Creating a Company Culture of Data Privacy - 1:00 - 2:00 PM
After the morning’s sessions, this keynote session will address the issue of data privacy from the inside.  Featuring a well-regarded speaker, this keynote will help address some of the lasting questions: How do you create a company culture which values data privacy and secures yourself from outside threats? How do you address the generational differences that exist within a company in order to win the battle? And what next? 
Speakers: Christopher Luise, Executive Vice President, Adnet Technologies, LLC
For more information, visit www.shipmangoodwin.com or www.ctshrm.org