ARMA - Boston Chapter Meeting
Thursday, September 17, 2009

Presents:

 "Preparing for the Massachusetts

Data Privacy Regulations"

Overview:   Many state legislatures are continuing to enact various new personal privacy protection laws that have a direct effect on document storage and management. Like many of its predecessors, the new Massachusetts privacy law, for example, which takes effect January 2010, applies to all organizations that employ or transact any business with state resident or entity from whom personal information is collected. You do not need to be based or have offices in Massachusetts to be included in this law’s requirements. Other state statutes are similar.
Particularly noteworthy is that the Massachusetts law is enhanced by an operational regulation that prescribes specific procedures, technologies and breach actions that must be implemented by all size organizations from “mom and pop” shops to multinational enterprises. It also establishes the requirement that records be protected in both paper and electronic form. Failure to demonstrate compliance with this regulation can result in fines and penalties that can exceed $5,000 per violation.
During this session, Craig Taylor, a leader in developing practical, affordable information security guidelines and procedures, will describe in non-technical language all you will need to do to prepare for this new wave of regulation regardless of what state your company resides in.
 

Hot issues to be discussed include:
• How can one ensure compliance with the diversity of state privacy laws?
• Which privacy regulations specifically affect records management?
• How can businesses minimize the cost of compliance?
• What management processes are needed to ensure ongoing compliance?

Biography:

Joined CSC in Dec. 1999

Joined CSC’s Global Security Solutions team (GSS)

ØCSC roles include:

• Firewall & Security Engineer

• Security Technology Consulting

• Lead Information Risk Manager, CSC Hosting (current)

--15+Years Experience in Security Industry Professional Experiences include:

--10 years Information Risk Management in online Hosting

--15+years Information Security

Education

• BA, University of Guelph, 1994

• CISSP since 2002 (24399)

• CCSA (NG) 2003

• GIAC Certified Incident Handling (GCIH) 2006

• Competent Toast Master (CTM) 1998

Currently Information Risk Manager for CSC’s web hosting division

Location: