Privacy Paradigms for Law Enforcement Response
summary
Claims that corporate law enforcement response systems are opaque and attractive crown jewels for nation-state attackers, citing the 2024 Salt Typhoon exploitation of lawful-intercept infrastructure that leaked call/IP metadata. Describes three control classes—technological, procedural, policy—and concrete risks: weakened oversight, rising AI-driven data collection, and data-broker enrichment. Recommends auditing the surveillance intermediaries you operate, mapping gaps between held data and likely requests, hardening access paths, and adopting technical standards and retention/granularity controls to reduce unnecessary disclosures.
AI-written summary · about
chapters (10)
- 0:00Introduction and agenda
- 1:23Understanding LER processes
- 2:27Data request classifications
- 4:49Controls for compliance
- 5:19Implementing internal controls
- 8:08Policy and oversight
- 9:16Systemic challenges and risks
- 10:07Case study: Salt Typhoon
- 11:59Impacts on oversight and data
- 13:07Recommendations and outlook
related talks
40mData Leadership: Navigating Security, Governance, and Ethical Decision-Making in the Digitial Skies
42mPrivacy, Crime, National Security, Human Rights & You in the Middle
01h 03mPanel: The security paradox. Individual privacy vs digital driftnets
01h 16mData protection and Big Data: what about regulating Big Data analytics?
01h 15mDATA PROTECTION ENGINEERING: WHAT IS THE ROAD AHEAD?
10m2024 Security BSides // Kurt Walton
42mThe CCEL and the Thin Line Between Cyber Defence and Pre-emption…
43mPanel: Privacy Design Patterns for AI Systems: Threats and Protections