By in-house counsel, for in-house counsel ®

Online Learning Center

Virtual Learning Lab - AI 202, Part 3: Third-Party Risk: Outsourcing and Artificial Intelligence

Virtual Learning Lab - AI 202, Part 3: Third-Party Risk: Outsourcing and Artificial Intelligence

  • Registration Closed

Outsourcing work often includes back-office functions, information technology, cybersecurity, product development, and on. The vendors our clients rely on to do this work themselves also outsource work. Our clients are thus relying on a third-party supply chain that may include dozens, hundreds, or even thousands of providers – a virtual ecosystem. Introduce into this supply chain a sudden rush to harness Artificial Intelligence (AI) and real risks emerge. Learn about assessing this third-party AI risk as part of traditional vendor security assessments, risk scoring systems, and new AI specific risk frameworks such as NIST AI Risk Management Framework, ISO 23053, and capAI (aligned to the European Union AI Act).


This live program offers free CLE in select jurisdictions for members of ACC. Please see details below! 

 

CLE/CPD CREDIT IS AVAILABLE IN THE FOLLOWING JURISDICTIONS: 

*Alaska, *Arizona, California, *Connecticut, Florida, Georgia, *Hawaii, Illinois, Minnesota, Missouri, *Montana, *New Hampshire, *New Jersey, *New York, North Carolina, *North Dakota, Ohio, Pennsylvania, Tennessee, Texas, and Washington. 

 

*Indicates that CLE/CPD credit is available by virtue of reciprocity with another jurisdiction. 

  

ATTENDEES MUST SELF-FILE IN THE FOLLOWING JURISDICTIONS (A CERTIFICATE WILL BE PROVIDED TO ASSIST YOUR FILING EFFORTS): 

Alabama, Arkansas, Colorado, Delaware, Florida, Idaho, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maine, Mississippi, Nebraska, Nevada, New Mexico, Oklahoma, Oregon, Puerto Rico, South Carolina, Rhode Island, Utah, Vermont, Virginia, West Virginia, Wisconsin, and Wyoming. 

 

 

CLE/CPD IS NOT MANDATORY IN THE FOLLOWING JURISDICTIONS: 

District of Columbia, Maryland, Massachusetts, Michigan, South Dakota 

Key:

Complete
Failed
Available
Locked
Program Feedback Form
7 Questions
First CLE Verification Code
Enter code to continue.
Enter code to continue.
Second CLE Verification Code
Enter code to continue.
Enter code to continue.
Certificate Claim Area
US States: CA, GA, IL, MN, MO, NC, OH, PA, TN, TX, and WA
Up to 1.20 CLE credits available  |  Certificate available
Up to 1.20 CLE credits available  |  Certificate available ACC has filed directly with the following states: California, Georgia, Illinois, Minnesota, Missouri, North Carolina, Ohio, Pennsylvania, Tennessee, Texas, and Washington. Please select you state and enter your bar number to have your certificate generate fully.
US States: AK, AZ, CT, HI, NH, NJ, NY, ND
Up to 1.20 CLE credits available  |  Certificate available
Up to 1.20 CLE credits available  |  Certificate available ACC uses interstate reciprocity rules to grant credit in the following states: Alaska, Arizona, Connecticut, Hawaii, New Hampshire, New Jersey, New York, North Dakota. Please select you state and enter your bar number to have your certificate generate fully.
US States: AL, CO, FL, ID, IA, IN, KY, ME, MS, MT, NE, NV, OK, OR, PR, RI, SC, UT, VA, WV, WI, and WY.
Up to 1.20 CLE credits available  |  Certificate available
Up to 1.20 CLE credits available  |  Certificate available ACC has not made an application for credit in the following states: Alabama, Colorado, Florida, Idaho, Iowa, Indiana, Kentucky, Maine, Mississippi, Montana, Nebraska, Nevada, Oklahoma, Oregon, Puerto Rico, Rhode Island, Utah, Virginia, West Virginia, Wisconsin, and Wyoming. The certificate provided here is to aid your personal application for credit to your state regulator.
Virtual Learning Lab - AI 202, Part 3: Third-Party Risk: Outsourcing and Artificial Intelligence
12/04/2025 at 1:00 PM (EST)  |  60 minutes
12/04/2025 at 1:00 PM (EST)  |  60 minutes Outsourcing work often includes back-office functions, information technology, cybersecurity, product development, and on. The vendors our clients rely on to do this work themselves also outsource work. Our clients are thus relying on a third-party supply chain that may include dozens, hundreds, or even thousands of providers – a virtual ecosystem. Introduce into this supply chain a sudden rush to harness Artificial Intelligence (AI) and real risks emerge. Learn about assessing this third-party AI risk as part of traditional vendor security assessments, risk scoring systems, and new AI specific risk frameworks such as NIST AI Risk Management Framework, ISO 23053, and capAI (aligned to the European Union AI Act).

Joe Whitehead, Sr.

Senior Corporate Counsel

Northrop Grumman Corp

Iliana Peterson

Shareholder

Polsinelli

ILIANA L. PETERS is recognized by the health care industry as a preeminent thinker and speaker on data privacy and security, particularly with regard to HIPAA, the HITECH Act, the 21st Century Cures Act, the Genetic Information Nondiscrimination Act (GINA), FERPA, the Privacy Act, state law data privacy and security requirements and emerging cyber threats to data. ILIANA works closely with her clients on complicated compliance questions, incident response, investigations and training to protect data and avoid legal risk and legal liability, both at the state and federal levels. ILIANA also supports clients’ defense of individual and class action litigation related to all types of data privacy, security and breach claims.


As a CISSP, she works hard to bridge the gap between legal requirements for the security of health data and security industry best practices, so that clients can better understand data security issues and jargon. ILIANA enjoys using her extensive experience drafting, implementing and enforcing health privacy and security regulations and guidance in a practice that focuses on helping clients develop and implement good data privacy and security practices to avoid risk, and helping clients prepare for and recover from emerging cyber threats.

For many years, ILIANA both developed information privacy and security policy, including on emerging technologies and cyber threats, for the Department of Health and Human Services, while coordinating with the Department of Justice, Department of Education, other federal agencies, State Attorneys General and the White House. She enforced HIPAA regulations through spearheading multimillion-dollar settlement agreements and civil money penalties pursuant to HIPAA. She also focused then on training individuals in both the private and public sector, including compliance investigators, auditors and State Attorneys General, on federal and state regulations and policy and on good data privacy and security practices.

ILIANA believes good data privacy and security are fundamental to ensuring consumer participation in new technologies, employee-employer relationships, patients’ trust in the health care system, students’ confidence in their education and helping all clients succeed in an ever-changing landscape of threats to data security.

Jame Ortiz

Senior Counsel - Digital, Technology, and Innovation

Albertson Companies

Jame Ortiz is a seasoned legal professional with extensive experience in corporate law and digital innovation. Currently serving as Senior Counsel for Digital, Technology, and Innovation at Albertsons Companies since July 2021, Jame is instrumental in developing the Product Counsel Center of Excellence and providing strategic legal guidance for omnichannel business initiatives. Prior to this role, Jame was a Corporate Counsel at Amazon from 2015 to 2019, contributing to the company's significant growth during that time. Jame's career began at Clifford Chance LLP, where Jame worked as a Senior Corporate and Securities Lawyer and managed teams across multiple international offices. Later, Jame served as a Senior Corporate Finance Lawyer at Dechert LLP, leading substantial financial deals in Central and South America. Jame holds a J.D. from New York University School of Law and a Bachelor's degree in Psychology from the University of Southern California.