|
Once per year, the Twin Cities Privacy Network hosts an all-day offsite where TCPN members spend time together in a relaxed setting trading notes about the coming year's priorities and learning from topical experts. At the retreat, the International Association of Privacy Professionals typically has proctored the exam for the Certified Information Privacy Professionals designation.
The 2008 retreat will be held at Travelers headquarters building at 385 Washington Street, Saint Paul, MN 55102. The cost for the all-day retreat is only $125, payable in advance (no registrations will be accepted the day of the event). Attendance to this event is by invitation only, and is generally restricted to corporate leaders and their staff. If you know of someone who would like to attend, contact us.
SPECIAL INFORMATION FOR THOSE TAKING A CERTIFICATION EXAM - This year, the IAPP will be administering the CIPP, CIPP/G, and CIPP/C examinations one day BEFORE the retreat. Testing will take place on Thursday, January 17th, 2007 from 9:00am to 1:00pm at Travelers in downtown Saint Paul. For more information e-mail Peter Kosmala at the IAPP.
Twin Cities Privacy Network - 2008 Retreat
Friday, January 18th - Travelers Headquarters, Saint Paul, MN |
8:00 |
Continental Breakfast / Social |
8:30 |
Opening Keynote Address - Travelers Chief Privacy Officer |
9:00
|
Privacy From the Nation’s Capitol -
Stu Ingis from Venable’s Washington, DC office will explore recent developments in the areas of privacy and behavioral targeting, social networking, and wireless marketing, including updates on FTC rules on affiliate data-sharing, ID theft red flags, and telemarketing, and the CAN SPAM Act, GLBA, and data security [Courtesy of Target Corp]
|
10:15 |
Break / Social |
10:45 |
The Employee Home Office: The Next Compliance Frontier -
As more employees work from home, the risks of home-based privacy breaches are on the rise. Alan Charles Raul, a Partner from Sidley Austin’s Washington, DC office, will detail the latest thinking on what is allowable in the US and overseas when it comes to auditing employee home offices, confiscating employee computing devices and media, gaining access to employee personal e-mail accounts, and issuing policies relating to employee home computing environments and personal blogs.
|
12:00 |
Lunch / Social |
1:00 |
Effectively Communicating Privacy and Security Requirements
What are the top 12 privacy, security, and retention messages all employees need to know in any company? What are the key moments and media for conveying these messages? What are the different cost points?
[Lifetouch, Plato Learning, Regis]
|
Data Encryption Lifecycle
Find out how companies are keeping data encrypted as it moves across different technology platforms throughout the extended enterprise.
[US Bank]
|
Building Privacy Into an Audit Program
The facilitator will review lessons learned in conducting privacy assessments and audits over the past year, and will lead a brainstorming exercise over what audit tests to use for each Generally Accepted Privacy Principle.
[MPC]
|
When You Don't Have A CPO
Find out how other companies are creating a “virtual CPO” by allocating privacy responsibilities across several departments. Discuss the pros and cons of this approach, and see if it’s a viable long-term alternative for your industry and corporate culture.
[Medtronic] |
Meaningful Metrics for Data Protection
How are privacy, security, and audit leaders getting the measurable evidence they need to verify policy compliance on an ongoing basis? How are they systematizing compliance with multiple regulations on an ongoing basis? [Sprint Nextel] |
2:00 |
Slush Time / Social |
2:30 |
Employee Monitoring Outside the US
What are the Do's and Don'ts of employee monitoring outside the US? How are companies setting rules and thresholds to log suspicious activities?
[3M]
|
Records Management Considerations
What are the top 10 records management considerations for the privacy professional?
[Courtesy of ARMA] |
Managing Data Inventories
Find out how others are uncovering the location of their priority data, managing their data inventories, and creating data governance programs.
[Target Corp]
|
Compliance for People in Trusted Positions
What are the best practices to ensure that people in trusted positions have the training and understanding of data privacy necessary to assure compliance with regulations? [Park Nicollet, Securian]
|
Mapping Data Classifications with Required Controls
How are other companies matching privacy, security, and retention controls with data classifications? Use other companies' anonymized policies to improve your own.
[Wells Fargo RCIS, Select Comfort] |
3:30 |
Open Discussion |
4:00 |
Adjourn |
*Hosted by Twin Cities Privacy Network™ and Minnesota Privacy Consultants™
Questions? Contact us.
|
