On Demand
Audio
AI in Cybersecurity and the Protection of Personally Identifiable Information
Produced on March 06, 2018
Course Information
Course Description
In the U.S., several legal regimes control the protection of privacy and cybersecurity, among them Massachusetts law 201 CMR 17.00, Nevada law NRS 603A, the Gramm-Leach Bliley Act (GLBA), the New York Department of Financial Services’ 23 NYCRR 500, as well as various other state laws related to notification of data breaches. Beyond regulatory requirements, parties may contract with each other to shift liability for breach of these laws, or require each other to be responsible for more obligations. These obligations may require companies to put in place new policies, practices, technology and personnel.
Artificial Intelligence (AI) aims to automate and do at scale what humans currently do better than machines, such as making decisions about whether a cyber-intrusion has occurred, or if there is a suspicious pattern of network activity. Companies may use AI to derive information about people from aggregate data which may not directly contain Personally Identifiable Information (PII), and these actions potentially risk putting such companies under the coverage of regulations and contractual obligations. Furthermore, as AI becomes better at protecting security, the “reasonable” industry standard may be to use such AI tools, and the failure to do so could have legal and economic consequences for companies.
In this program, Huu Nguyen, a Squire Patton Boggs partner with a strong technical background, will introduce the legal implications of using AI as a tool to help companies analyze data, including a practical discussion of the benefits and pitfalls in implementing these systems.
Learning Objectives:
- Review basic AI technology useful for cybersecurity and PII processing and protection
- Discuss how AI may change the industry standard of care in cybersecurity
- Examine how AI may be used to process personally identifiable information and aggregate data and its impact on legal requirements for protecting PII
- Explore ethical considerations in the protections of systems and data using AI
Credit Information
Faculty
Huu Nguyen
Squire Patton Boggs
Huu Nguyen is a deal lawyer who focuses his practice on cross-border commercial and corporate transactions. On the commercial side, he assists established and emerging companies on a range of national and international transactions, including Fintech transactions, supply chain agreements, reseller and distributor relationships, technology transactions, manufacturing and licensing arrangements, outsourcing, and many other commercial areas. On the corporate side, Huu advises on innovation program formations, mergers and acquisitions, and corporate governance, among other corporate matters. Huu’s prior experience before becoming a deal lawyer includes intellectual property litigation and patent prosecution. Huu holds both a B.S. and an M.S. from University of Texas at Austin and a J.D. from University of California, Berkeley, Law School.
Reviews
solid
Excellent.
Excellent legal points. And great explanation of complex tech for attorneys not necessarily versed in it!
good course with good organization
A detailed, complex, and evolving area of the law was covered in an understandable and summary fashion. Standards for using artificial intelligence as an appropriate tool of a cybersecurity plan will continue to change to allow for protection of personally indentifiable information while addressing ever-increasing sophistication of cyber attackers.
Great practical advice on securing sensitive information.
Good CLE
Very interesting course.
FASCINATING
Good. This was my first CLE in this field so it was all new territory for me. Difficult to assess, but seemingly well done.
One of the best presentations for this CLE reporting period.
Great subject
Thanks!
Great cle.
Very thorough materials.
Excellent!!
Interesting material
Great program! Thanks
interesting topic
Great topic.
Nice introduction to a complicated topic. Thank you!
Program needed better organization.
I found this course to be very professional, informative and interesting.
Good presentation
Course was excellent and highly relevant.
Appreciated the references to outside cases and other reading materials.
Mr. Huu was particularly helpful in providing materials with leads to further information which could be obtained in case law or on the Internet. Lawline might encourage its other presenters to do likewise.
The portion focusing on AI was excellent. Overall a good course.
Tons of info. Would have liked more examples of actual legal provisions to include in agreements to address cybersecurity issues. With all of the info addressed in this course, could be divided into two or more courses. Attorney very knowledgeable. So much to say, so little time!