This event is part of the “Making Research Real” series, hosted by Boston University.

When the general public thinks of the hazards of the Internet, they think about phishing schemes or SQL injection. Not the 95% of the Internet we don’t see — like how email is delivered or Netflix is streamed. The fact is, most of the web is still unsecured and there’s plenty to worry about beyond devising a foolproof password.

Join Boston University Provost Jean Morrison and honorary co-hosts the Congressional Cybersecurity Caucus for an illuminating panel discussion with leading researchers, policymakers, and government officials on the true breadth of Internet insecurity and what can (or can’t) be done to fix it.

Speakers:

• Sharon Goldberg, Associate Professor of Computer Science, Boston University
• Joseph Hall, Chief Technologist, Center for Democracy & Technology
• Joseph Calandrino, Research Director, Office of Technology Research and Investigation, Federal Trade Commission

Boxed lunches will be provided.

In accordance with Congressional ethics rules, this is a widely attended event.

The European Privacy Association (EPA) General Data Protection Regulation (GDPR) webinars will be held throughout the year and are aimed at all professionals interested in the regulation of data protection. Each webinar will be chaired by Dr. Paolo Balboni, President and Noriswadi Ismail, Scientific Director and members of our Scientific Committee and will last for 60 minutes, ending with a Q&A session. The webinars will focus on compliance, governance, business controls and operational aspects in relation to the forthcoming GDPR relevant for all companies doing business in Europe. The GDPR debate and discussion have dominated the European marketplace for the past 4 years. Organisations and stakeholders have 2 years to operationalise their GDPR readiness programme to avoid non-compliance enforcement actions from national Data Protection Authorities.NB: If you weren’t able to sign up before the first webinar it is still possible to sign up for the series. In compensation you will receive a detailed summary of the April 20th presentation.

The price of attendance for the remaining webinars is €670.00 (excluding VAT)
Fellows receive a special discount of 50% for a total of €350.00 (excluding VAT) for all remaining webinars

To become Fellow of EPA it is necessary to send your CV to info [@]europeanprivacyassociation. eu and subject to a positive EPA Board evaluation of your profile, you will need to contribute to EPA.  Fellow annual supportership is €100.00 (excluding VAT).
If you would like to know more about the benefits of becoming a Fellow please contact us.

– All webinars will be recorded in case you cannot attend and have paid for the package –

Feel free to contact us for further information.

Please RSVP to webinar [@] europeanprivacyassociation.eu

In November 2015, the Federal Trade Commission (FTC) hosted a workshop on cross-device tracking. Cross-device tracking is the process of identifying users across multiple devices such as smartphone and tablet. This process generates linkage between these devices where users and consumers can be monitored, making them targets of relevant advertising and personalized services based on their online activities.

The proliferation of devices and various apps have paved the way for marketers to connect with consumers through targeted advertisements and greater fraud prevention resulting to improved users’ online experience. However, the perceived lack of transparency and effective opt-out mechanisms for consumers unsurprisingly got the attention of the FTC. The Commission emphasized that every digital advertising should be offering consumers opt-out options and that privacy should still be of paramount concern. Furthermore, failure to precisely describe the scope of opting out of cross-device tracking may be considered an unfair or deceptive practice in violation of Section 5 of the FTC Act.

In this two-hour LIVE Webcast, a panel of key thought leaders and practitioners assembled by The Knowledge Group will offer a discussion on the new opportunities in Cross-Device Tracking and the legal issues and aspects involving data privacy. The panel will also help companies better understand various cross-device models and will provide the best practices in developing and implementing an effective and compliant digital advertising program and in mitigating privacy violation risks that firms may face when using cross-device tracking.

Key Topics:

• Cross-Device Tracking
• Overview of Online Behavioral Advertising
• Market Trends for Cross-Device Tracking
• Regulatory and Self-Regulatory Framework
• Privacy and Security Issues
• Best Disclosure Practices for Many Forms of Social Media
• Consumer Privacy Bill of Rights
• Data Privacy and Security Compliance
• Regulatory Updates
• Development of Compliant Advertising Program
• Litigation Risks

Agenda

Julia B. Jacobson, CIPP/US, CIPM, Partner
Seyfarth Shaw LLP

Anna Myers, CIPP/US
International Association of Privacy Professionals (IAPP)

David LeDuc, Senior Director, Public Policy
Software & Information Industry Association

INTRODUCTION

• Definition of “Interest Based Advertising (IBA)”
• Definition of “Cross Device Tracking (CDT)”

BUSINESS LANDSCAPE – RISKS AND REWARDS OF CDT

• Why Marketers Use CDT
• Revenue Models Landscape

US REGULATORY LANDSCAPE

• U.S. Regulation & Self-Regulation
• CDT Disclosures in Privacy Policies
• Regulatory Heat Map Outside US

CASE STUDIES

The IoT has limitless potential to bring people, everywhere, a better quality of a life. At Samsung, we know that it requires the industry’s collaboration with policy makers and social change-makers to take the power of this technology to scale.

Phones have become essential tools for modern everyday life. As we rely more and more on apps, how can we ensure that they are only doing what we’re asking. Come to Privacy Lab and find out about new efforts to track what your phone is actually doing from Berkeley’s ICSI Haystack Project and Northeastern University’s Recon.

Dave Choffnes will talk about – ReCon: Identifying and Controlling Privacy Leaks from Mobile Devices

ReCon is a cross-platform system for mobile devices that reveals privacy leaks and gives users control over them without requiring any special privileges or custom OSes. Specifically, our key observation is that PII leaks must occur over the network, so we implement our system in the network using a software middlebox. We then use a machine learning approach to to efficiently and accurately detect users’ PII without knowing a priori the content that is PII. Further, we develop techniques to block, obfuscate, or ignore the PII leak, by displaying leaks via a visualization tool and letting the user decide how the system should act on transmitted PII. I discuss the design and implementation of the system and evaluate its methodology with measurements from controlled experiments and flows from a user study with more than 200 volunteer participants worldwide.

Narseo Vallina-Rodriguez will talk about: The ICSI Haystack: A Tool to Illuminate the Mobile Ecosystem

As a society we have come to rely upon our mobile phones for myriad
daily tasks. It is striking how little insight we, as mobile users and
researchers, have into the operation of our apps, into how (or
whether) they protect the information we entrust to them, and with
whom they share it. The research community have energetically used a
variety of approaches to gain empirical understanding of the mobile
device/network ecosystem; however, these techniques have had to make
tradeoffs that affect either the scale or accuracy of measurements.
This talk describes how we leverage ideas from this prior work to
design and develop the ICSI Haystack: a user-space mobile app that
inspects user’s traffic locally and in real time for researchers and
average users alike. We will discuss our preliminary results about the
alarming presence of third-party services in mobile apps and our
future development efforts.

Primal Wijesekera will talk about a user study of Andriod applications and how protected data is accessed. The talk will go into detail about the user response and the study of over 27M datapoints of third party app’s data access.

Kashmir Hill will talk about security flaws in the Waze app that allow hackers to track your location. She’s written extensively about for fusion.net and will give a full rundown of the situation at Privacy Lab.

More information about Narseo can be found here: https://www.haystack.mobi

What to Expect:

As per Privacy Lab’s standard format, Narseo and David will talk, followed by a short Q&A session. Afterwards we will breakout into informal small group discussions and networking from 7-8pm If you can’t make it to the talks/Q&A, you are still welcome to join us for the small groups and networking or vice versa.

Background Info:

Privacy Lab is a meeting for people who are interested in digital privacy in the Bay Area, and is a follow-up to previous events held at Mozilla and other spaces for the past year. The goal of these events is to bring together privacy professionals and privacy community members at non-profits, for-profits, and NGOs alike to foster communication and collaboration.

For those who can’t attend the event will be livestreamed via CSM Passcode here: http://www.csmonitor.com/World/Passcode/2016/0603/Event-Mobile-privacy-and-what-your-apps-are-actually-doing

Join CoSN and the Texas K-12 CTO Council for our 11th annual CTO Clinic! The event will bring together leaders from around the state and the region to discuss pressing issues in education technology.

Online registration is now closed but please attend and register onsite!

Keynote Speaker:

Dr. Larry Johnson is a globally acknowledged expert on emerging technology and its impacts on society and education, and author of five books, seven chapters, and more than 175 papers and research reports on the topic. He speaks regularly on educational trends, creativity, leadership, and innovation, and has delivered nearly 225 keynote addresses to a long list of distinguished groups and organizations all over the world. He founded the acclaimed Horizon Project, and is a visionary whose work is recognized in nearly 200 countries.

For more than 20 years, Johnson has convened thought leaders from across the globe to define and explore emerging trends and issues. Summits and large-scale projects that he has planned have helped set the agenda for topics such as visual literacy, learning objects, educational gaming, immersive learning, the future of scholarship, and social networking.

Having served as CEO, president and senior executive at institutions in both the higher education and not-for-profit realms, he has more than 30 years of significantly relevant experience in the global education arena, and has served in campus roles from professor to dean, CIO to provost, president, and CEO. His educational background includes an MBA in Finance and a Ph.D. in Education that focused on research and evaluation. Among much other recognition, Dr. Johnson has been honored as a Distinguished Graduate by his alma mater, the University of Texas at Austin.

Privacy Panel:

Educators and policymakers are increasingly realizing the potential in using student data to make informed decisions. But even with all that potential, balancing technology advances with the need to protect student privacy and data is a major challenge. Privacy experts will discuss CoSN’s newest privacy initiative is the Trusted Learning Environment (TLE) Seal. This initiative allows school system leaders from across the country to communicate their privacy efforts to parents, communities, and other stakeholders while ensuring that the school system is adhering to best practices and taking steps in the right direction.

Sheryl Abshire- CTO, Calcasieu Parish Public Schools

Did you know that there has been a 10,000-fold increase in the number of new digital security threats in the last twelve years? The attacks have become so sophisticated that cyber-criminals are now specifically targeting your data. With cyber-crime now outpacing insider theft, mishandling of records and any other origins of data breaches, organizations need to understand the latest cyber security threats and data breach trends. When will you be Hacked and Attacked?

Attendees will learn:

• Hear about this year’s emerging threats to data and how organizations can take action by adjusting their security, privacy, and compliance efforts.
• Delve into the latest cyber-attacks to help you better understand the legal and regulatory complexities surrounding privacy and security incidents and data breaches.
• Learn best practice strategies for pre- and post-breach planning procedures and processes considering all organizations will experience a breach.

Cannot make the webinar? Don’t worry! Register for the event and we will send you an email with the recording of the webinar and slides as soon as it becomes available.