CISO Sydney

With the growth of the digital services industry and AI technologies, data has arguably become one of the most valuable economic resources of the modernized economy - however, it is also becoming increasingly the most regulated and riskiest to handle.

The emergence of the GDPR in Europe, which is based on a set of comprehensive principles and obligations for data controllers, extra-territorial application and strict enforcement mechanisms has been followed by countries and jurisdictions around the world passing similarly prescriptive data privacy and protection laws all with their own unique requirements.

Today more than 200+ countries have passed data privacy and protection laws which keep getting more complex and demanding - countries like New Zealand, Indonesia and India are now also morphing these regulations into Data Protection and Privacy requirements including for Sensitive Data. Australia is also embarking on its own uplifts to Privacy Laws.

The scope of responsibilities for data controllers under these global data privacy and protection laws are also growing - with many modern

Thus organizations in APAC are encountering experiences in which they are seeing Data Sovereignty Laws as well as banking regulations around PII and MetaData that require audit and compliance at cloud scale.

Key Takeaways / Learnings

We will explore the organisational impacts we are seeing across the region in meeting these challenges

• The key impacts and considerations for organisations who are impacted by merger of PI and SI into multiple regulations.
• Technology is being developed and adopted to help organisations to manage these regulations at scale and where possible autonomously.
• An overlap of roles and responsibilities across Policy, Classification and Protection is occurring and the adoption of cloud and multicloud is accelerating this.