The document summarizes a webinar titled "Preparing Your Company for a Privacy Rebellion". It introduces four speakers on the topic: David Katz, a privacy lawyer; Usman Ghani, a data strategy expert; Jodi Daniels, a director of privacy; and Dan Schroeder, an information security expert. The webinar was intended to help companies understand privacy laws and best practices for collecting and using customer data, including how to audit privacy controls and implement standards like the Generally Accepted Privacy Principles.

1. Preparing Your Company for a Privacy Rebellion
A Complimentary LexisNexis® Webinar
September 12, 2013
Jodi Daniels, Director of Privacy at Autotrader.com
Usman Ghani, Managing Director of Infinium Strategy Group, Inc.
David F. Katz, Partner, Nelson Mullins Riley & Scarborough
Dan Schroeder, Partner, Habif, Arogeti and Wynn, LLC

2. 1LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
About the Speakers
David F. Katz is a Partner in Nelson Mullins Riley & Scarborough's Atlanta
office where he leads the Privacy and Information Security Practice Group.
He counsels clients on the development, management, and oversight of
privacy and compliance programs. He also assists them in developing policies
and procedures, education strategies, implementation of auditing and
monitoring controls, reviews of disciplinary and enforcement activities, and
risk assessments. He speaks and writes on matters relating to technology,
privacy and data security. His tweets can be followed on twitter
@KatzFDavid.

3. 2LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
About the Speakers
Usman Ghani, MBA, Managing Director of Infinium Strategy Group, Inc., has 15+
years of Enterprise Information Management (EIM) experience in several Fortune
500 companies. Usman has a Bachelor's of M.I.S. and a Master's in Business
Administration from Emory University's Goizueta Business School. Usman has
architected Customer 360 solutions for Fortune 20 companies and has extensive
experience in Infinium's core competencies such as big data, business
intelligence, master, meta, and reference data management. Usman's tweets can
be followed at @TheDataCompany.

4. 3LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
About the Speakers
Jodi R. Daniels, Director of Privacy at AutoTrader.com. Ms. Daniels focuses on
consumer privacy and data protection conducting information privacy risk
assessments and monitoring associated compliance efforts. She serves as liaison with
product, marketing, information technology and advertising sales organization teams
across AutoTrader.com and its subsidiaries. Ms. Daniels also works with legal counsel
and management to ensure that the organization has and maintains appropriate
privacy and confidentiality policies, notices and other materials reflecting current
organization and legal practices and requirements. She earned both a Masters of
Business Administration and a Bachelor of Business Administration with a
concentration in Accounting from Emory University’s Goizueta Business School. She
was a Forté Fellow based on her academic and professional merit while attaining her
Executive MBA. She is also a Certified Public Accountant in Georgia. Ms. Daniels
resides in Dunwoody, Georgia with her husband and two year old daughter.

5. 4LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
About the Speakers
Dan Schroeder is the partner-in-charge of Habif, Arogeti & Wynne’s Information
Assurance Services practice that serves leading technology based companies on a
national and international basis. Dan has over twenty-five years experience in IT
management and risk management functions in both internal roles at a Fortune 100
company and in client serving roles with leading CPA firms.
The services Dan oversees include:
Service Organization Control (SOC) reporting that replaced SAS 70
Security and Privacy compliance risk management, e.g., ISO 27001, PCI,
HIPAA/HITECH, EU Safe Harbor, and banking regulations
Security assessments including vulnerability scanning and penetration testing
Data management and assurance
Dan is the immediate ex-chairperson of the AICPA Information Technology Executive
Committee (ITEC) and serves on the AICPA task forces for Privacy and for SOC
Reporting, and is lead designer of the new AICPA SOC reporting school.

6. 5LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Road Map
• The Premise.
• The Environment: Total Surveillance, Corporate Responsibility and
Transparency.
• Overview of Data Gathering: What are Companies Doing with
Your Data?
• Overview of Privacy Laws.
• Understanding the Laws and Enforcement Authority Governing
Consumer Privacy. One Example for Self Regulation for OBA.
• Responsibility of Companies in Collection and Use of PII from a
Security Perspective.
• Overview of the Audit of Privacy and Security Controls.
• Audits and Accountability of Information Standards and Practices.
• Generally Accepted Privacy Principles (GAPP).
• Recommended Take Aways.

7. 6LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
The Environment: Total Surveillance.
Corporate Responsibility and Transparency?

8. 7LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
The Environment: Total Surveillance.
Corporate Responsibility and Transparency?

9. 8LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Single View of Customer

10. 9LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Golden Record
Infinium∞

11. 10LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Customer 360

12. 11LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
“Big Data in a slide” by Infinium

13. 12LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Opportunistic Exploitation

14. 13LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Companies use Customer 360
to answer key questions

15. 14LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Privacy and Security of Personally
Identifiable Information

16. 15LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Privacy and Security of Personally
Identifiable Information

17. 16LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Agencies Administering U.S. Privacy Laws

18. 17LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
FTC Enforcement

19. 18LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Statutes Granting Enforcement Authority to the FTC

20. 19LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Consumer Marketing Communication Disclosures

21. 20LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Online Advertising

22. 21LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Mobile

23. 22LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Leading Cases

24. 23LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Leading Cases

25. 24LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Leading Cases

26. 25LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Triggers for FTC Complaints

27. 26LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Recent 2013 FTC Comments and Enforcement Actions

28. 27LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
FTC on Mobile Marketing and Mobile Application
Development

29. 28LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
FTC's Recent Comments

30. 29LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
DAA Self-Regulatory Principles

31. 30LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
DAA Self-Regulatory Principles

32. 31LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Principles for Online Behavioral Advertising

33. 32LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Principles for Online Behavioral Advertising

34. 33LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Principles for Online Behavioral Advertising

35. 34LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Principles for Online Behavioral Advertising

36. 35LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Principles for Multi-Site Data

37. 36LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Application of Principles to Mobile Environment

38. 37LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Website Operator/Publisher Implementation

39. 38LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Website Operator/Publisher Implementation

40. 39LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Website Operator/Publisher Implementation

41. 40LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Website Operator/Publisher Implementation

42. 41LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Responsibility of Companies in Collection and use of
PII from a Security Perspective

43. 42LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Common Security Weaknesses related to PII / PHI

44. 43LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Security Assurance Program for PII / PHI

45. 44LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Essential security best practices

46. 45LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
AICPA Service Organization Control (SOC) Reports

47. 46LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
SOC 2 Report Purpose

48. 47LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Generally Accepted Privacy Principles (GAPP)

49. 48LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Generally Accepted Privacy Principles (GAPP)

50. 49LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Take Aways

51. 50LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Take Aways

52. 51LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Take Aways

53. 52LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Take Aways

54. 53LexisNexis Webinar: Preparing Your Company for a Privacy Rebellion, September 12, 2013
Question and Answer Session
Thank You!
Jodi Daniels
CPO
Jodi.daniels@autotrader.com
Autotrader.com
Usman Ghani
Principal
usman@infiniuminc.com
Infinium
404.695.3514
David F. Katz
Partner
david.katz@nelsonmullins.com
Nelson Mullins Riley & Scarborough LLP
404.322.6122
Dan Schroeder, CPA, CIA, CISA, CIPP/IT, PCI-QSA
Partner-in-Charge - Information Assurance Services
DAN.SCHROEDER@hawcpa.com
770.353.8379