Virtual Learning Lab - AI 202, Part 3: Third-Party Risk: Outsourcing and Artificial Intelligence
- Registration Closed
Outsourcing work often includes back-office functions, information technology, cybersecurity, product development, and on. The vendors our clients rely on to do this work themselves also outsource work. Our clients are thus relying on a third-party supply chain that may include dozens, hundreds, or even thousands of providers – a virtual ecosystem. Introduce into this supply chain a sudden rush to harness Artificial Intelligence (AI) and real risks emerge. Learn about assessing this third-party AI risk as part of traditional vendor security assessments, risk scoring systems, and new AI specific risk frameworks such as NIST AI Risk Management Framework, ISO 23053, and capAI (aligned to the European Union AI Act).
This live program offers free CLE in select jurisdictions for members of ACC. Please see details below!
CLE/CPD CREDIT IS AVAILABLE IN THE FOLLOWING JURISDICTIONS:
*Alaska, *Arizona, California, *Connecticut, Florida, Georgia, *Hawaii, Illinois, Minnesota, Missouri, *Montana, *New Hampshire, *New Jersey, *New York, North Carolina, *North Dakota, Ohio, Pennsylvania, Tennessee, Texas, and Washington.
*Indicates that CLE/CPD credit is available by virtue of reciprocity with another jurisdiction.
ATTENDEES MUST SELF-FILE IN THE FOLLOWING JURISDICTIONS (A CERTIFICATE WILL BE PROVIDED TO ASSIST YOUR FILING EFFORTS):
Alabama, Arkansas, Colorado, Delaware, Florida, Idaho, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maine, Mississippi, Nebraska, Nevada, New Mexico, Oklahoma, Oregon, Puerto Rico, South Carolina, Rhode Island, Utah, Vermont, Virginia, West Virginia, Wisconsin, and Wyoming.
CLE/CPD IS NOT MANDATORY IN THE FOLLOWING JURISDICTIONS:
District of Columbia, Maryland, Massachusetts, Michigan, South Dakota
Key:
Iliana Peterson
Shareholder
Polsinelli
ILIANA L. PETERS is recognized by the health care industry as a preeminent thinker and speaker on data privacy and security, particularly with regard to HIPAA, the HITECH Act, the 21st Century Cures Act, the Genetic Information Nondiscrimination Act (GINA), FERPA, the Privacy Act, state law data privacy and security requirements and emerging cyber threats to data. ILIANA works closely with her clients on complicated compliance questions, incident response, investigations and training to protect data and avoid legal risk and legal liability, both at the state and federal levels. ILIANA also supports clients’ defense of individual and class action litigation related to all types of data privacy, security and breach claims.
As a CISSP, she works hard to bridge the gap between legal requirements for the security of health data and security industry best practices, so that clients can better understand data security issues and jargon. ILIANA enjoys using her extensive experience drafting, implementing and enforcing health privacy and security regulations and guidance in a practice that focuses on helping clients develop and implement good data privacy and security practices to avoid risk, and helping clients prepare for and recover from emerging cyber threats.
For many years, ILIANA both developed information privacy and security policy, including on emerging technologies and cyber threats, for the Department of Health and Human Services, while coordinating with the Department of Justice, Department of Education, other federal agencies, State Attorneys General and the White House. She enforced HIPAA regulations through spearheading multimillion-dollar settlement agreements and civil money penalties pursuant to HIPAA. She also focused then on training individuals in both the private and public sector, including compliance investigators, auditors and State Attorneys General, on federal and state regulations and policy and on good data privacy and security practices.
ILIANA believes good data privacy and security are fundamental to ensuring consumer participation in new technologies, employee-employer relationships, patients’ trust in the health care system, students’ confidence in their education and helping all clients succeed in an ever-changing landscape of threats to data security.
Jame Ortiz
Senior Counsel - Digital, Technology, and Innovation
Albertson Companies
Jame Ortiz is a seasoned legal professional with extensive experience in corporate law and digital innovation. Currently serving as Senior Counsel for Digital, Technology, and Innovation at Albertsons Companies since July 2021, Jame is instrumental in developing the Product Counsel Center of Excellence and providing strategic legal guidance for omnichannel business initiatives. Prior to this role, Jame was a Corporate Counsel at Amazon from 2015 to 2019, contributing to the company's significant growth during that time. Jame's career began at Clifford Chance LLP, where Jame worked as a Senior Corporate and Securities Lawyer and managed teams across multiple international offices. Later, Jame served as a Senior Corporate Finance Lawyer at Dechert LLP, leading substantial financial deals in Central and South America. Jame holds a J.D. from New York University School of Law and a Bachelor's degree in Psychology from the University of Southern California.