Duane Hay Director, Systems Engineering Symantec Canada. Kevin Chan Head of Public Policy, Canada Facebook Canada

Transcription

1 Print Page Agenda and Speakers Canadian Privacy Summit 2017 May 2 3, 2017 Toronto Featured Speakers Jennifer Stoddart Regulator Advisor Nymity Inc. Duane Hay Director, Systems Engineering Symantec Canada Erika Brown Lee Senior Vice-President and Assistant General Counsel Mastercard Chantal Bernier Counsel Dentons Canada LLP Della Shea Vice-President, Data Governance and Chief Privacy Officer Symcor Inc. Dr. Ann Cavoukian Executive Director of the Privacy and Big Data Institute Ryerson University Kevin Chan Head of Public Policy, Canada Facebook Canada Burns MacDonald Director, Global Cyber Security Group CGI Information Systems and Management Consultants Cameron Davidson-Pilon Director, Merchant Optimizations and Algorithms Shopify Inc. Dr. Éloïse Gratton Partner and National Co- Leader, Privacy and Data Security Borden Ladner Gervais LLP Agenda > Show Me: Full Agenda Speakers Only Tuesday, May 02, :00 am Registration and Continental Breakfast 8:30 am Welcome and Opening Remarks from the Chair Andrew Pender will welcome delegates and present an outline of the summit. He will also position the summit program in light of discussions held at the 2016 Privacy Summit. Andrew G. Pender

2 Associate Director The Conference Board of Canada 9:00 am Plenary Session 1 Keynote Presentation: Strategic Direction for Innovation, Technology, and Privacy This keynote will explore directions for Canada in achieving organizational and economic growth while simultaneously attaining and valuing privacy. Canada has the opportunity to position itself as a leader globally in technology and data analytics capability and also in privacy and data protection. But what is the right formula and how do we achieve the right formula? John Kelleher Co-Chair, NEXT Canada and Partner, McKinsey & Company 10:00 am Networking and Health Break Enjoy some free time to grab a coffee and network with peers. 10:30 am Plenary Session 2 Global Regulatory Trends: Positioning Canada for Economic Prosperity This panel session will explore Canada's evolving strategic privacy and data protection framework within a world of regulatory and geo-political change. The discussion will cover the EU's GDPR and the threat to adequacy status, the right to be forgotten, consent, CASL, data and politics, and extra territorial issues. Moderator: Dr. Éloïse Gratton Partner and National Co-Leader, Privacy and Data Security Borden Ladner Gervais LLP Panellists: Daniele Chatelois Manager, Policy Office of the Privacy Commissioner of Canada Dean Dolan Counsel, International Commercial Baker McKenzie LLP Paul McKay

3 Vice-President, Deputy Global Compliance Chief and Global Chief Privacy Officer Manulife Burns MacDonald Director, Global Cyber Security Group CGI Information Systems and Management Consultants John H. Weigelt National Technology Officer Microsoft Canada 12:00 pm Networking Luncheon Join us for a luncheon to network, renew, and make new connections with speakers, experts, and potential partners! Delegates will have the opportunity to discuss and share their insights and key take-aways. 1:15 pm Plenary Session 3 Exploring Privacy Expectations and Evolving Social Norms This panel session will explore evolving consumer and citizen expectations in the context of ethics and privacy. What are the current boundaries and how do we expect them to change? In this session, 'yes' and 'no' zones will be discussed, in addition to ethics and data, as well as generational expectations and views of privacy. Moderator: Jennifer Stoddart Regulator Advisor Nymity Inc. Panellists: Kevin Chan Head of Public Policy, Canada Facebook and Instagram Canada David B. Elder Special Digital Privacy Counsel, Canadian Marketing Association and Counsel Stikeman Elliott LLP David Fewer Director, Samuelson-Glushko Canadian Internet Policy and Public Interest Clinic (CIPPIC) University of Ottawa

4 Della Shea Vice-President, Data Governance and Chief Privacy Officer Symcor Inc. 2:30 pm Refreshment and Health Break Enjoy some free time to grab a coffee and network with peers. 2:45 pm Interactive Concurrent Sessions Set A (Privacy Lab 1) Please choose one of two dynamic, interactive sessions: 2:45 pm Interactive Concurrent Session A1 Data Use Case Mobility Biometrics and Facial Recognition There has been rapid growth of mobility, biometrics, and access technologies. These technologies are intersecting and are raising new implications for privacy. Biometric technologies, such as facial recognition tools, are now being widely used to ascertain user identity, track mobile users and/or personalize services, products, and advertising. These tools are gaining widespread acceptance in consumer products. Smartphones and other devices employ biometrics and facial recognition technology to collect, store and track personal identifiers. Service providers sometimes claim these personal identifiers do not amount to personal information, or that personal information is not being collected or stored, or if collected, stored securely. Many questions arise as to how well user data is protected, the choice that users have in the collection of that data and how that data may be used or shared with third parties. The data use case scenario will explore these questions and more. Co-Moderators: David Fewer Director, Samuelson-Glushko Canadian Internet Policy and Public Interest Clinic (CIPPIC) University of Ottawa Dr. Éloïse Gratton Partner and National Co-Leader, Privacy and Data Security Borden Ladner Gervais LLP 2:45 pm Interactive Concurrent Session A2 Data Use Case Automated Processing and Algorithms, as it Relates to Decision Making Affecting Identifiable Individuals With competition and technological innovation fueling both the private and public sectors, Artificial Intelligence and Machine Learning are bringing organizational data capabilities to new heights. Automated processing and algorithms enable organizations to optimize large data sets with not just historical but real time and predictive insights. This also

5 brings the ability to cross reference data sets and the possibility of reidentifying otherwise anonymous data subjects including individuals. This capability has real implications for privacy and its regulation in Canada. The legal consent model can easily break down in a big data environment. Questions also arise as to the transparency and accountability of organizations in their use of automated processing and algorithms in making decisions that affect individuals. The big data scenario will tackle the tough questions around this ever growing challenge for organizations, regulators, and society. Co-Moderators: Corinne A. Charette Senior Assistant Deputy Minister of the Spectrum, Information Technologies and Telecommunications (SITT) Innovation, Science and Economic Development Canada Della Shea Vice-President, Data Governance and Chief Privacy Officer Symcor Inc. 4:00 pm Report Back on Interactive Concurrent Sessions Set A (Privacy Lab 1) Rapporteurs from the Interactive Concurrent Sessions A1 and A2 groups will summarize the key take-aways from each of the two interactive sessions. 4:15 pm Plenary Session 4 The Internet of Things and Realizing Meaningful Privacy This panel session will focus on the rapid change within technology, specifically around the "Internet of Things" and how meaningful privacy can be realized. Moderator: John H. Weigelt National Technology Officer Microsoft Canada Panellists: Corinne A. Charette Senior Assistant Deputy Minister of the Spectrum, Information Technologies and Telecommunications (SITT) Innovation, Science and Economic Development Canada Cara-Lynn Stelmack Director, Mediation and Investigation Alberta Office of the Information and Privacy Commissioner

6 Erika Brown Lee Senior Vice-President and Assistant General Counsel Mastercard Duane Hay Director, Systems Engineering Symantec Canada 5:15 pm Closing Remarks from the Chair Andrew G. Pender Associate Director The Conference Board of Canada 5:30 pm Day 1 Adjourns Wednesday, May 03, :00 am Continental Breakfast 8:30 am Opening Remarks from the Chair Andrew Pender will provide a recap of the issues discussed on Day 1 and will outline the program for Day 2. Andrew G. Pender Associate Director The Conference Board of Canada 8:45 am Plenary Session 5 When the Data Scientist Meets the Privacy Officer This panel session will explore how privacy and data analytics can optimize their relationship. The discussion will focus on the relationships, technologies and processes needed to realize both privacy needs and valuable data analytics. Moderator: Ron Reuben Software Engineering Program Director and Business Leader IBM Canada Ltd. Panellists: Cameron Davidson-Pilon Director of Merchant Optimizations and Algorithms Shopify Inc.

7 Robin Gould-Soil Chief Privacy Officer HSBC Canada Amanda Maltby General Manager, Compliance and Chief Privacy Officer Canada Post Corporation Stuart Young Consultant, Product Management Environics Analytics Group 10:15 am Networking and Health Break Enjoy some free time to grab a coffee and network with peers. 10:45 am Interactive Concurrent Sessions Set B (Privacy Lab 1) Please choose one of two dynamic, interactive sessions: 10:45 am Interactive Concurrent Session B1 Data Use Case Wearables Wearables seem to be everywhere. Consumers are using them in new applications from fitness and life tracking applications to infotainment, to healthcare and medical and even to industrial, police and military applications. Many of these wearables provide great benefits but at the same time have implications for privacy as they reveal characteristics about individual behavior. Wearables pose a great challenge to the existing consent model in Canada because of the tremendous amount of data that can be combined and analyzed and then utilized, often without appropriate transparency, accountability or meaningful consent. Many privacy questions arise around the collection and use of data from these devices and just how informed users are to how their data is being used. This use case scenario will examine the key questions and the key points of controversy around wearables. Co-Moderators: John Liut Director, Corporate Compliance & AML Advisory and Chief Privacy Officer Home Trust Company Cara-Lynn Stelmack Director, Mediation and Investigation Alberta Office of the Information and Privacy Commissioner

8 10:45 am Interactive Concurrent Session B2 Data Use Case Apps and Voice Recognition Voice-assisted apps and new and emerging voice-assisted digital home or office assistants are becoming more and more popular with consumers. Whether its from a smartphone or digital home assistant, voice commands provide a variety of completed tasks and information at a users fingertips. For the newer digital home assistant devices they are often connected to home networks (IoT) where they can play songs and turn off lights and complete other tasks. But there exists potential for microphones and camera surveillance through many of these devices and within many of these apps and devices, data from voice commands is collected and stored. For users it provides a tremendous convenience but also presents some serious potential privacy concerns around access to users behaviour and personal habits. The scenario will examine the real privacy implications and what it means for users, organizations, and for society. Co-Moderators: John Wunderlich President John Wunderlich & Associates, Inc. Amanda Maltby General Manager, Compliance and Chief Privacy Officer Canada Post Corporation 12:00 pm Networking Luncheon Join us for a luncheon to network, renew, and make new connections with speakers, experts, and potential partners! Delegates will have the opportunity to discuss and share their insights and key take-aways. 12:45 pm Keynote Presentation Embed Privacy into the Design of Your Operations or Flounder: Privacy Breeds Innovation Privacy appears to be under siege. With the growth of ubiquitous computing, online connectivity, social media, wireless/wearable devices, and Artificial Intelligence, people are being led to believe they have no choice but to give up on privacy. This is not the case! Dr. Cavoukian will outline a privacy framework called Privacy by Design that will enable our privacy and our freedom, to live well into the future. While some believe that fundamental privacy protections will be challenged by the operation of Big Data analytics, Dr. Cavoukian dispels the notion that privacy acts as a barrier to analytics and the innovations they can spark. She argues that the limiting paradigm of "zerosum" that you can either have privacy or innovation, but not both is an outdated, win/lose model of approaching the question of privacy in the age of Big Data and IoT. Instead a "positive-sum" solution is needed in which the interests of both sides may be met, in a doubly-enabling, "winwin" manner through Privacy by Design (PbD). PbD is predicated on the

9 rejection of zero-sum propositions by proactively identifying the risks and embedding the necessary protective measures into the design and data architecture involved. Dr. Cavoukian will demonstrate how you can embed privacy into virtually any system or operation to achieve positive sum outcomes, enabling both privacy and data utility not one at the expense of the other. Dr. Ann Cavoukian Executive Director of the Privacy and Big Data Institute Ryerson University 1:15 pm Plenary Session 6 Finding the Right Social Contract for Trust and Transparency This panel session will explore the social contract organizations must strive for in order to greater the social trust needed between organizations and consumers/citizens when using their data. This session will also explore the evolving roles of Chief Privacy Officers and ATIP Officers within organizations and how they play a part in the social contract for trust and transparency. Moderator: Wendy Mee Partner Blake, Cassels & Groyden LLP Panellists: Lisa Austin Associate Professor, Privacy Law University of Toronto Chantal Bernier Counsel Dentons Canada LLP John Dalla Costa Founding Director Centre for Ethical Orientation Pamela Snively Chief Data and Trust Officer TELUS 2:45 pm Refreshment and Health Break Enjoy some free time to grab a coffee and network with peers.

10 3:00 pm Plenary Session 7 Privacy Lab 2 Moderated Dialogue A brief report-back from Interactive Concurrent Sessions B1 and B2, which will be followed by a moderated dialogue with delegates on what we learned as well as potential next steps. 3:30 pm Closing Remarks from the Chair Andrew G. Pender Associate Director The Conference Board of Canada 3:45 pm Summit Adjourns Sponsors We d like to thank our generous sponsors for their contribution to this event. Marketing Partner

11 Travel Partner The details of this event are subject to change. Please revisit this page periodically for updated information. Copyright 2017 The Conference Board of Canada,* 255 Smyth Road, Ottawa ON K1H 8M7 Canada *Incorporated as AERIC Inc., Agreement No