Resources | SecureWorld

CISO Update: Use Automated Data Classification to Meet CPRA Obligations

Written by SecureWorld News Team | 10 PM Z

The California Privacy Rights Act (CPRA) goes live at the end of this year, and with it comes more work for already overstretched cybersecurity teams. The new law requires them to protect "personal information from unauthorized or illegal access, destruction, use, modification, or disclosure," but doesn't offer any specifics on what measures are acceptable. 

Moreover, new data privacy laws in Virginia and Colorado will be enacted then, as well, each featuring similar language that requires stronger privacy and security measures. If your organization deals with personal information from any of these states (or European Union), data classification is perhaps the most cost-effective tool for advancing compliance.

Join our roundtable discussion as CISOs and subject matter experts put the latest data classification innovations into context and share their experiences and intended plans for how to comply with upcoming legal and regulatory obligations for sensitive data management.

Takeaways include:

• The mechanics of data classification

• The relationship between classification and policy enforcement

• How data classification applies to data privacy and cybersecurity compliance

• How to transform a paper data classification policy into an electronic one

Attendees are eligible to receive 1 CPE credit.