Coping with Multiple Federal Privacy Regulations
Recorded On: 10/07/2024
-
Register
- Non-member - $80
- Member - $40
- *Further discounts may apply once you log in.
Many federal agencies are creating regulations for privacy and cybersecurity, with Notices of Proposed Rulemaking coming out every few months. They do not seem to be coordinated with state efforts and may contradict other agency regulations and law enforcement. This session will review some of these new regulations, highlight contradictions, and explore possible ways to proceed if your organization is subject to contradictory requirements.
Key:






Moya Novella
Legal Counsel, Privacy and AI Policy
IBM
My name is Moya Novella. I was born and raised in the Blue Mountains of Jamaica, West Indies, I am a Long Island New Yorker, and I am a first-generation college graduate and lawyer.
In my professional life I am a Data Privacy and Artificial Intelligence (AI) Policy Attorney, with expertise in global legislative policy and advocacy, and compliance with global privacy and data protection laws and regulations. I speak internationally on the topics intersecting AI, privacy, and law.
My academic achievements in the United States include a Juris Doctorate, Master of Arts in Public Policy, and Bachelor of Science in Sociology.
My international academic experience includes postgraduate certificate and advanced law courses in Ghana, W. Africa, Portugal, Spain, Switzerland, and the United Kingdom.
I hold CIPP/US and CIPP/E certifications with the International Association of Privacy Professionals.
I am a Long Island Business News 2020 Executive Circle Award and Leadership in Law Award honoree.
Views are my own and not representative of any organization.

Harold Federow
ICT Senior Contract Vendor & IP Manager
Port of Seattle
Specialties: Technology law, IT & Software law, intellectual property law, business law

Elvia Gastelo
Assistant General Counsel, Privacy & Data
Dollar Tree Stores, Inc.
Entrepreneurial attorney with experience counseling senior leaders of the world's fourth-largest retail group and a Fortune 150 company on data security, privacy, antitrust, consumer protection, intellectual property, and white collar matters.
Background in federal enforcement, complex litigation, internal audits, international merger & acquisitions, regulatory matters, and start-up entrepreneurship. Excellent communication, interpersonal, and leadership skills.
Native Spanish speaker, proficient in French and Italian. Lived in Europe and Latin America.
Core competencies include:
* Antitrust & Competition
- HSR, M&A, Conduct
- Sherman Act, Clayton Act, FTC Act
* Anti-bribery, Anti-corruption, FCPA
* Privacy, Data Security
- AI Working Groups, AI governance
- GDPR, CPRA, VCDPA, CPA, BIPA
- HIPAA, COPPA, TCPA, CAN-SPAM, PCI-DSS
- Data Breach Notification Laws
* Critical Thinking
* Creative Problem Solving
* Risk Assessment
* Strategic Planning
* Management
* Policy Creation
* Training Development
* Oral & Written Advocacy
* Marketing & Product Counseling
* Cross-Functional Collaboration
* Relationship Building
* Legal Research & Analysis

Zach Willenbrink
Shareholder, Privacy and Cybersecurity
Godfrey & Kahn, S.C.
Zach is a shareholder on the firm’s Data Privacy, Cybersecurity & Technology and Litigation teams. He leads the Data Disputes and Cybersecurity practices and is also a member of the firm’s recruiting and ethics committees.
Clients turn to Zach for practical, business-oriented advice on compliance, breach preparation and response, and tech litigation. Zach helps clients design and implement cybersecurity and privacy programs to comply with the growing number of applicable state, federal, and international laws. Zach also stays on the forefront of Artificial Intelligence developments and works with clients to development AI programs reflecting current best practices. He counsels clients on preparing for and responding to information security and privacy breaches, including leading tabletop exercises and acting as breach coach to guide clients through the complex process of responding to a data incident. And, when disputes arise on security, privacy, IT contracting, and related issues, Zach leads high-stakes commercial litigation and consumer-class- and regulatory-action defense.
Zach’s professional experience outside Godfrey & Kahn includes in-house-counsel, governmental, and academic work. Zach led the global privacy program and cybersecurity operations of the in-house legal department of a Fortune 500 manufacturing company. Zach developed and teaches the course Cybersecurity: Law and Practice at Marquette Law School. He also spent nearly a half-decade clerking for U.S. District Judge J.P. Stadtmueller of the Eastern District of Wisconsin. Zach’s industry certifications and service include:
- CompTIA Security+
- ISC2 Certified in Cybersecurity (CC)
- UCLA Cybersecurity Certificate
- IAPP Certified Information Privacy Professional, United States (CIPP/US)
- IAPP Certified Information Privacy Manager (CIPM)
- Service on the Sedona Conference Working Group 11’s drafting group on the legality of ransomware payments
Outside of work, Zach enjoys writing music. He’s released music and toured the country as a member of several bands, and his solo work has been used in the scores of feature-length films.
CLE/CPD CREDIT IS AVAILABLE IN THE FOLLOWING JURISDICTIONS:
*Alaska, *Arizona, California, *Connecticut, Georgia, *Hawaii, Illinois, Minnesota, *Montana, *New Hampshire, *New Jersey, *New York, *North Dakota, Ohio, Pennsylvania, Tennessee, Texas, and Washington.
*Indicates that CLE/CPD credit is available by virtue of reciprocity with another jurisdiction.
ATTENDEES MUST SELF-FILE IN THE FOLLOWING JURISDICTIONS (A CERTIFICATE WILL BE PROVIDED TO ASSIST YOUR FILING EFFORTS):
Alabama, Arkansas, Colorado, Delaware, Florida, Idaho, Indiana, Iowa, Louisiana, Kansas, Kentucky, Maine, Mississippi, Missouri, Nebraska, Nevada, New Mexico, North Carolina, Oklahoma, Oregon, Puerto Rico, Rhode Island, South Carolina, Utah, Vermont, West Virginia, Wisconsin, and Wyoming.
CLE/CPD IS NOT MANDATORY IN THE FOLLOWING JURISDICTIONS:
District of Columbia, Maryland, Massachusetts, Michigan, South Dakota