PROFESSIONAL EDUCATION SERIES WEBINAR

Rethinking Your Third Party Data Relationships: The Information Dating Game

From flirting and marriage to divorce and ultimately death, your relationship with information and the commitments you make with third parties undergoes constant changes and must be effectively managed. Whether exchanging data with business partners or sharing information within departments or business units, each type of transaction establishes a data relationship that must be appropriately managed to ensure compliance with both an organization’s policies and applicable regulations around data protection.

Meeting the compliance challenges posed by third party data relationship management requires coordinated, ongoing management of multiple elements of data-policy compliance and risk management across the entities in the data sharing relationship.  These include risk assessment and monitoring of the sharing relationship and prospective third party, and substantial monitoring, tracking, classifying, and regulation of the enterprise’s data flow.

In this live, interactive webinar, the panelists will discuss such topics as:

• Appropriate definition of third party relationships- what kind of controls are appropriate for what kinds of data relationships; how do types of data, entities and purposes for sharing impact the expectations and controls
• Third party risk assessment and monitoring- risk-based prioritization of entities for levels of monitoring; measuring compliance performance
• Mechanisms for joint management of compliance- shared resources and controls
• Change management- new data practices, new terms of agreement around sharing, new data relationships; incorporating change control into data-policy compliance management
• Trans border data flow issues- advantages/disadvantages of the Safe Harbor framework over model contracts for certain types of data or certain types of transfers; whether some means of meeting adequacy requirements are more favorable to some types of data or third parties; what impact binding corporate rules may have
• Off-shore outsourcing of data processing or data-dependent services; practical problems for compliance management
• Data source due diligence- ensuring that data you receive and process is data you can receive and process
• Role of compliance technologies in third party data relationship management- what technologies are available to address control issues, what piece of the problem do they (claim to) address, what do we want a technology to do for us in this context, and what are some key criteria for assessing compliance technologies for managing third party data relationships