Hacking Our Identity: Biometrics, AI, and Emerging Technology Issues

On October 1, 2019, Winston & Strawn hosted an International Association of Privacy Professionals event in the firm’s Houston office with L. Renee Lowe from Harris County Attorneys Office and Jeffrey Vinson, VP & CISO for Harris Health Systems.

The panel—“Hacking Our Identity: Biometrics, AI, and Emerging Technology Issues”—explored laws relating to emerging technology (such GDPR and BIPA) and how companies are responding to data security challenges.

Panelists agreed on the following privacy best practices and steps companies can take towards compliance:

• Understand your data—how information flows through your company and where it goes.
• Monitor changes in the law—understand the scope of your potential liability.
• Update your policies/procedures—account for disclosure requirements/consumer requests and ensure statements are accurate.
• Implement privacy and data security by design—involve attorneys when designing products and services.
• Access data security—undergo an audit, implement additional controls/established frameworks, and update breach response plan.
• Update your contacts—GDPR/CCPA contains specific contractual requirements; ensure that you are not “selling” data.

Visit Winston’s Privacy & Data Security page for more information on how we meet and anticipate our clients’ needs in this rapidly evolving area.