When GDPR and CCPA strike
summary
GDPR and CCPA turn “works-as-designed” data use into legal risk: Equifax’s settlement hits about $700M, Cambridge Analytica affected ~87M profiles and would face ~£1.4B under today’s GDPR math. Practical steps: tie personal-data audits into vendor reviews, run cookie scans, enforce vendor contractual clauses that forbid non‑business reuse, encrypt data by default but right‑size controls, and maintain an operational program evidenced by a SOC 2 audit report (or ISO/NIST) to reduce liability and make breaches non‑actionable.
AI-written summary · about
chapters (28)
- 0:00Intro
- 0:30Rafis background
- 1:08What this talk is about
- 1:59Custom SWAT Truck
- 2:20Car Chase
- 2:57Front Door Breach
- 3:24Why should security team secure
- 4:47Parallax
- 5:59Security from GDPR lens
- 7:12Uncertainty
- 8:02Finding solution
- 8:42Driving without headlights
- 9:54Summary
- 10:19Scenario 1 Email campaign
- 11:12Scenario 2 Two tools
- 12:23Takeaway
- 12:53Accidental sharing
- 13:44Water landing
- 14:46Unique risk profile
- 16:29Highrisk processing
- 17:35The takeaway
- 18:14The final scenario
- 18:51What is actionable
- 19:24Reasonable security
- 19:57Conclusion
- 20:32Recap
- 20:56Conclusions
- 23:02Data processing
related talks
55mBattle for online privacy
01h 07mStrategic Goals and Mechanisms of the GDPR and CCPA
52mDeveloping privacy
44mPanel Discussion – Data Policy and Global Data Privacy Developments
46mDeveloping for Privacy
26mData Protection Update and Tales from the Introduction of the GDPR
49mPractical privacy: GDPR explained
22mCCPA: State privacy law effects on cloud development