Hosted by Data Privacy Board Member Costco
Agenda
Wednesday, September 2
11:30 AM
Registration Opens
12:00 PM
Lunch Discussions
Grab a seat and get to know all of the great privacy leaders at the Summit.
1:00 PM
Welcome & Introduction
1:15 PM
Case Study
We Resisted AI…Now it’s the Newest Privacy Teammate
Michelle Hess, VP Data Compliance and Risk Management at Marriott Vacations Worldwide
Michelle Hess, VP Data Compliance and Risk Management, will share a candid case study on how MVW moved from an “AI not allowed” posture to intentionally embedding AI as a governed teammate inside privacy operations. The session will walk through how this shift changed their privacy training model, awareness strategy, and PIA process design. We’ll go behind the scenes to learn what worked, what broke, and where human oversight remains non‑negotiable.
1:45 PM
Break
1:55 PM
Case Study
Fair Patterns in Practice: Turning “Don’t Be Creepy” into Enforceable Criteria
Aaron Weller, Leader – Privacy Innovation and Assurance, and Emmi Bane, Principal – Data Ethics and Emerging Technologies at HP
Aaron Weller, Leader – Privacy Innovation and Assurance, and Emmi Bane, Principal – Data Ethics and Emerging Technologies at HP, will share a detailed look at how they operationalized “unfair patterns” concerns in real product and AI agent experiences. This presentation will include how they translated abstract concerns into a usable taxonomy and checklist, where the gray areas showed up, and how they embedded their findings into governance and review processes without slowing teams down.
2:25 PM
Break
2:35 PM
Case Study
Making privacy measurable: Defining and communicating program impact
3:05 PM
Networking Break
3:35 PM
Case Study
Streamlining third-party risk: Creating efficiency without sacrificing oversight
4:05 PM
Break
4:15 PM
Case Study
Operationalizing privacy + AI governance: Moving from principles to practice
4:45 PM
Adjourn
5:00 PM
Data Privacy Board Members-Only Dinner
Following our afternoon of conversations and case studies, we’ll have a fantastic dinner just for our members. It’s a perfect opportunity to connect with your privacy peers before a big day of brainstorming, discussion, and collaboration. For our guest attendees, we’ll see you tomorrow!
Thursday, September 3
8:00 AM
Breakfast Discussions
The conversations over coffee and eggs at this event are often more lively than any other conference’s happy hour. You’ll want to be here bright and early (and on time).
8:40 AM
Welcome Back
8:50 AM
Break
9:00 AM
WorkshopAI in Employment Decisions: Trusting the Black Box?
As organizations increasingly leverage AI-enabled and automated technologies, privacy teams are being asked to navigate a rapidly evolving landscape of legal, operational, and reputational risk. Norman White, Managing Counsel for Global Privacy Compliance at Intel, will facilitate this confidential discussion as we compare how our organizations are assessing and governing the use of AI in employment-related decisions across hiring, employee monitoring, performance management, and workforce planning. |
WorkshopPrivacy by Design: Breaking the Reactive Cycle
|
|---|
9:30 AM
Break
9:45 AM
WorkshopBeyond Checklists: Preparing for CPRA Audits in Practice
As deadlines loom to get your program ready for California’s cybersecurity audit requirements, compare your progress with fellow privacy leads. Linda Trickey, IHG Head of Privacy Legal, will facilitate an open conversation on assessing readiness, the role of privacy in the process, best practices in engaging key stakeholders and relevant systems, auditor considerations, and leveraging mechanisms like attorney/client privilege. |
WorkshopReality Check: Is Consent Tech Working Like We Say it is? |
|---|
10:15 AM
Networking Break
10:35 AM
WorkshopFrom policy to product: Embedding privacy into development workflows |
WorkshopGlobal privacy risk strategy: Aligning teams and telling the “so what” story |
|---|
11:05 AM
Break
11:20 AM
WorkshopEmployee data in 2026: Where are the biggest risks now? |
WorkshopRegulatory enforcement in practice: Are we preparing for the right risks? |
|---|
11:50 AM
Lunch Discussions
12:50 PM
Break
1:00 PM
Peer Advisory Roundtables Round 1
EXAMPLE TOPICS:
- Beyond Data Privacy Day: How to increase awareness year-round
- Addressing employee privacy concerns
- Vendor review: OneTrust
- PIAs: Evaluating your process
1:30 PM
Peer Advisory Roundtables Round 2
EXAMPLE TOPICS:
- Taking on AI accountability
- Data mapping: Building for long-term privacy success
- Assessing and managing data privacy risk in China
- WhatsApp, WeChat, etc: Weighing risk and opportunity
2:00 PM
Break
2:15 PM
Peer Advisory Roundtables Round 3
EXAMPLE TOPICS:
- Data privacy and DEI initiatives: Balancing progress with compliance
- Loyalty programs: Balancing privacy compliance and growth
- Data minimization strategy for privacy compliance
- Records retention: Best practices for big companies
2:45 PM
Adjourn
Please note: This agenda is subject to change based on speaker availability and scheduling.
