Companies are storing more and more business data in the cloud, including sensitive information subject to specific security and privacy requirements. Until recently, the cloud was lacking in objective standards for the protection of such data. That changes last year with the adoption of the first international standard for protection of personally identifiable information (PII) in public clouds, ISO 27018. While compliance with this new standard is voluntary, it is expected to become a best practice for Cloud Service Providers in the future, and has critical implications for companies doing business in the cloud and around the world.
Topics to be discussed include:
What are the key data privacy and data protection issues companies should consider before moving to cloud computing technologies?
How to understand and successfully navigate the legal liability for data stored in the cloud, with laws varying among jurisdictions?
What are the options for the ethical and legal use of this data as part of your company's business?
What are the key substantive requirements of ISO 27018 for handling customer data?
How does ISO 27018 adoption benefit customers in regulated industries such as healthcare and financial services?
What reasonable expectations should companies have of a cloud provider who claims ISO 27018 compliance?
How do the ISO 27018 requirements map against existing sector-based data privacy and security standards (e.g., HIPAA, SOC 2)?
Speakers
Larry Disenhof, Group Director, Export Compliance & Government Relations, Cadence Design Systems
Sharon Gillett, Principal Networking Policy Strategist, Microsoft Research
Colin Zick, Partner, Co-Chair, Healthcare Practice & Co-Chair, Privacy & Data Security Practice, Foley Hoag LLP
We use cookies to enhance user experience, improve functionality and performance, and for analysis of website traffic. By clicking “accept”, you agree to the use of cookies. For more information about our cookie policy and the information we collect, please review our Privacy Statement.
Foley Hoag
Email Disclaimer
Transmitting information to us by e-mail unilaterally does not establish an attorney-client relationship or impose an obligation on either the law firm or even the receiving lawyer to keep the transmitted information confidential. By clicking "OK," you acknowledge that we have no obligation to maintain the confidentiality of any information you submit to us unless we already represent you or unless we have agreed to receive limited confidential material/information from you as a prospective client. Thus, if you are not a client or someone we have agreed to consider as a prospective client, information you submit to us by e-mail may be disclosed to others or used against you.
If you would like to discuss becoming a client, please contact one of our attorneys to arrange for a meeting or telephone conference. If you wish to disclose confidential information to a lawyer in the firm before an attorney-client relationship is established, the protections that the law firm will provide to such information from a prospective client should be discussed before such information is submitted. Thank you for your interest in Foley Hoag.
