Incident and Breach Management: Building a Harmonized Response Plan for Privacy & Security Teams
In the event of a breach, privacy and security professionals often approach incident response from two different outlooks. Whereas security teams are focused on threat vectors, privacy teams are concerned with personal data leaks and adhering to various global privacy laws. While the two come from different perspectives, it is possible to build an incident and breach response plan that addresses the needs of both teams. In this session, we'll discuss how to build a harmonized response plan that addresses both the security team's technical needs and privacy team's regulatory requirements across the patchwork of US privacy laws, the GDPR and other global privacy regulations. We'll also provide tips to help you map out a 72-hour personal data breach action plan and share practical advice to improve your privacy program
Privacy, Governance & Risk Management
Linda Thielová serves as Data Privacy Counsel at OneTrust, the largest and most widely used dedicated privacy management technology platform for compliance with global privacy laws. In her role, Linda provides guidance on GDPR-related privacy obligations to support product innovation and assist with compliance efforts for a wide spectrum of organistions from both private and public sectors. She also conducts training and workshops on the global privacy landscape and contributes to various publications and conferences on a regular basis.
With five years of professional experience in privacy from various roles and sectors, Linda's background combines judiciary review of administrative decisions and more hands-on experience of building internal company privacy programs from an in-house legal counsel position.
Linda is a Certified Information privacy Professional (CIPP/E, CIPM) and holds a master's in law and Legal Science.