When your company or client receives an inquiry from a state or federal regulator, it is important to know how to handle the inquiry appropriately, especially if it turns into a formal investigation. Similarly, when a privacy incident occurs—whether due to bad press, an independent researcher tweeting a security issue, a customer complaint, or a lawsuit—knowing how to respond the right way is critical. This panel will describe the inquiry/incident process and share their experiences and lessons learned along the way. What you’ll take away: · Learnings about what is involved when a regulator inquires about company privacy and security practices · Lessons learned from practitioners who have experienced their fair share of press, inquiries, investigations, lawsuits, settlements and other bad stuff · Insight into what researchers in the field are doing, how they are doing it and what they are looking for