Data Compliance: Business Strategies, Digital Risks, and Practical Recommendations

EPAM Law invites you to participate in the II Conference on Data Compliance: Business Strategies, Digital Risks, and Practical Recommendations, taking place on 19 March 2024 (Tuesday) from 10:00 to 15:30 in a hybrid format.

Venue (for in-person participants): Safmar Palace Moscow, 19 1st Tverskaya-Yamskaya Street, Moscow
Welcome coffee: 9:30–10:00

About the Conference

The year 2024 has seen sweeping changes in personal data regulation. New legislative proposals introducing multi-million rouble turnover fines and criminal liability for management, as well as expanded powers for Roskomnadzor to conduct unscheduled inspections, have been prompted by the surge in data leaks and growing cyber threats.

As a result, company leaders are being forced to revise information security policies and restructure business processes. Last year, during the I Conference, industry experts assessed the previous round of changes. Now, however, businesses face new challenges that could determine the future of their operations.

At this event, EPAM Law attorneys, members of Roskomnadzor’s expert groups, cybersecurity specialists, and business representatives will discuss how companies can handle personal data following the latest regulatory shifts and how to mitigate criminal, reputational, and other risks.

In the Q&A session, EPAM Law’s data protection team will address participants’ questions.

Target Audience

Business owners, top management, heads of legal and HR departments, commercial and financial directors, chief accountants, and information security specialists at large companies.

Programme

Part I – Session: «Data Never Lies: Regulatory Updates and Best Practices in Personal Data Protection»

Time: 10:00–11:30

• Personal data protection in 2024: legislative updates
• Data centres, cloud solutions, cookies, HRM and CRM systems: risk management and mitigation strategies
• Consequences of personal data breaches for businesses
• Building a robust data protection architecture: Ozon’s experience
• Data as an asset: what exactly are we protecting?

Part II – Session: «Personal Data: Criminal Code Amendments, Increased Liability, and Managing Digital Risks»

Time: 12:00–13:00

• Liability for personal data leaks: what management needs to know
• Criminal cases in the field of personal data: trends and risks
• Cyber threats to business: how not to become a victim of digitalisation
• Cyber insurance: key features, risk mitigation, and best practices

Part III – Q&A Session: «Public Talk on Data Protection: Answers and Business Recommendations»

Time: 13:30–14:30

• How to conduct a legal audit of personal data practices
• What fines can be imposed, and for what?
• What are the risks of mistakes in cross-border data transfers?
• And other practical questions from conference participants

Part IV – Networking Session and Buffet (for in-person participants)

Time: 14:30–15:30

Moderators

• Pavel Sadovsky, PhD in Law, Partner, Head of IP / TMT Practice, EPAM Law (Session I)
• Elena Agaeva, Partner, Head of Data Protection Practice, EPAM Law; Member of Roskomnadzor’s Competence Centre on Personal Data (Session II)
• Maria Chernobrovkina, Director for Government Relations, AmCham Russia / Director, Pacific-Eurasian Business Alliance (Session III)

Speakers

• Ivan Smirnov, Managing Partner, EPAM Law (St. Petersburg)
• Elena Agaeva, Partner, Head of Data Protection Practice, EPAM Law; Member of Roskomnadzor’s Competence Centre on Personal Data
• Andrey Tuzov, PhD in Law, Counsel, Head of White-Collar Crime Practice, EPAM Law (St. Petersburg)
• Elena Kvartnikova, Attorney, Associate, Data Protection Practice, EPAM Law
• Olga Glazkova, Director of Financial, Professional, and Cyber Risk Insurance, Remind
• Mikhail Ratushny, Head of Data Protection Practice, Ozon
• Sergey Timofeev, Data Protection Manager, AstraZeneca