Old Dog, New Tricks - The Latest Data Protection Laws-april security sig April 6, 2009

Crime is up, identity theft is rising and new breach incidents are reported almost daily. Although data security laws have been around a while now, it's no surprise that new and stronger laws and rules aimed at preventing identity theft and security breaches continue to be on the rise. Hear about the latest data protection laws that may impact your business, as well as the potential fines, criminal penalties, costs and other business and legal risks your business could face if you don't comply. Free handouts will be provided, including charts on state breach notification and data protection laws and a handy security incident response worksheet.

Areas of law to be covered include:

Data Breach Notice (Newest data elements, harsher penalties)
Data Protection (PCI codification, encryption)
Massachusetts Data Security Regulations
Data Retention and Disposal
Medical Identity Theft
Red Flag Rules
And More - to be determined by 2009 lawmakers . . .
Susan Lyon is of counsel with Perkins Coie's Privacy & Security practice. Susan provides practical advice to a broad range of multinational companies on privacy, data security, online safety and Internet laws. Her practice includes regulatory compliance counseling, litigation, and legislative policy.

Prior to joining Perkins Coie, Susan gained significant, practical experience as former in-house counsel representing recognized corporate leaders in the area of privacy. As privacy counsel for Microsoft Corporation, Susan provided U.S. and international privacy and data security advice to groups such as Xbox, Office, MSN, MSNBC and others. Susan also represented Microsoft as U.S. policy counsel for online safety and privacy and data security breach legislation. Additionally, as former lead privacy counsel for Dell Inc., Susan helped Dell achieve the honored recognition as one of the top ten Most Trusted Companies for Privacy two years in a row. While at Dell, Susan provided counsel on a wide range of privacy and data security issues, including payment card industry data security rules and marketing privacy.