When a data breach spans multiple jurisdictions, the first 72 hours decide whether your organisation controls the narrative – or reacts to it. We have guided a number of clients through exactly that scenario, coordinating notifications and regulator engagements across multiple jurisdictions in real time.
Join us for an exclusive breakfast briefing where the team behind those responses shares a practical account of what works, what surprised us, and what we would do differently. Drawing directly on live incidents, we will cover:
- The critical first moves: who to appoint as your point of contact in each jurisdiction, and why getting this wrong early costs you later
- The senior risk: The personal exposure senior management can face for late or non-reporting in certain jurisdictions – including custodial risk
- The reputational risks beyond customer service: Why some regulator notifications can become public, and how to manage that reputational risk before you file
- The regulators behind the curtain: How regulatory requirements, process, expectations and tone differ across jurisdictions (UK, APAC and beyond), and how to tailor your approach accordingly
- The invisible actors: How responses might differ when you know the cause vs when there is a malicious actor
This session is designed for General Counsel and senior in-house teams who want the operational detail regulators and boards will expect you to already know – not a theoretical overview.
Enjoy breakfast whilst connecting with fellow attendees from 08:30 - 09:00. Our panel discussion will take place from 09:00 - 10:00.