S3 E7: CompliancePoint Exchange

1
00:00:00,000 --> 00:00:05,900
Welcome to Compliance Pointers,
2
00:00:05,900 --> 00:00:09,120
where we take an in-depth look into the latest news,
3
00:00:09,120 --> 00:00:12,560
trends, and challenges surrounding information security,
4
00:00:12,560 --> 00:00:15,240
privacy, and marketing compliance.
5
00:00:15,240 --> 00:00:19,120
Let's dive in with your host, Jordan Eisner.
6
00:00:19,120 --> 00:00:21,960
All right. Hello, everybody.
7
00:00:21,960 --> 00:00:26,280
I am joined here today by the one and only Matt Kegel.
8
00:00:26,280 --> 00:00:29,240
Hey, Matt. Hey, Jordan.
9
00:00:29,240 --> 00:00:33,800
Matt has been with Compliance Point for,
10
00:00:33,800 --> 00:00:37,240
what's the total? 15, 16 years?
11
00:00:37,240 --> 00:00:38,520
A lot. Yeah.
12
00:00:38,520 --> 00:00:40,120
In some form or fashion,
13
00:00:40,120 --> 00:00:41,760
not quite drinking age,
14
00:00:41,760 --> 00:00:44,320
but we're a teenager.
15
00:00:44,320 --> 00:00:46,560
Yeah. Slight break in there,
16
00:00:46,560 --> 00:00:50,560
but then came back and now are in the role of
17
00:00:50,560 --> 00:00:52,320
Senior Vice President and General Manager.
18
00:00:52,320 --> 00:00:57,720
But in a way, you grew up with business,
19
00:00:57,720 --> 00:01:02,280
and you came from a very niche part of our business
20
00:01:02,280 --> 00:01:04,820
that we refer to as the marketing compliance practice.
21
00:01:04,820 --> 00:01:07,080
I came from that practice as well.
22
00:01:07,080 --> 00:01:11,240
That's evolved even since the time I started 11 years ago,
23
00:01:11,240 --> 00:01:14,400
and you were a architect
24
00:01:14,400 --> 00:01:16,400
behind a lot of the services and things we do there,
25
00:01:16,400 --> 00:01:19,720
and you are an architect behind
26
00:01:19,720 --> 00:01:23,600
first ever Compliance Point Exchange,
27
00:01:23,600 --> 00:01:28,200
CPX coming 2025, March of this year.
28
00:01:28,200 --> 00:01:30,080
We decided to do a little podcast
29
00:01:30,080 --> 00:01:32,040
because I've never got to have you on the podcast.
30
00:01:32,040 --> 00:01:33,200
You've posted a few of these,
31
00:01:33,200 --> 00:01:35,200
but for our listeners,
32
00:01:35,200 --> 00:01:40,280
for our viewers to just get even a little bit more idea of what this is,
33
00:01:40,280 --> 00:01:42,040
what it was born out of,
34
00:01:42,040 --> 00:01:44,240
to expect, what are the drivers,
35
00:01:44,240 --> 00:01:47,680
what they can walk away with, some of the basics.
36
00:01:47,680 --> 00:01:50,480
Yeah. That's what we'll do here today,
37
00:01:50,480 --> 00:01:54,840
and we'll probably keep it pretty short and sweet for the listeners.
38
00:01:54,840 --> 00:02:00,480
But let's start with what is Compliance Point Exchange?
39
00:02:00,480 --> 00:02:03,040
You teed it up well.
40
00:02:03,040 --> 00:02:10,720
It's been an idea that I know the both of us and others have talked about for a few years now,
41
00:02:10,720 --> 00:02:13,560
and it's finally coming to fruition.
42
00:02:13,560 --> 00:02:17,360
It is our first customer-focused conference.
43
00:02:17,360 --> 00:02:24,400
It is bringing our long-term clients and partners together in person,
44
00:02:24,400 --> 00:02:29,360
which I think we're all craving as we still come out of the COVID thought.
45
00:02:29,360 --> 00:02:34,360
Let's talk about lessons learned in the marketing compliance space
46
00:02:34,360 --> 00:02:38,040
and in the rapidly growing data privacy space.
47
00:02:38,040 --> 00:02:41,040
We have a very strong client base,
48
00:02:41,040 --> 00:02:42,560
and as I mentioned,
49
00:02:42,560 --> 00:02:46,400
a great partner network, particularly attorneys that we work with.
50
00:02:46,400 --> 00:02:48,160
We've long thought, hey,
51
00:02:48,160 --> 00:02:51,680
we need to get all these people together so they can learn from each other,
52
00:02:51,680 --> 00:02:55,520
and we're excited to finally be doing that just about a month from now,
53
00:02:55,520 --> 00:02:58,080
March in Orlando.
54
00:02:58,080 --> 00:03:01,120
Right. That was going to be one of my next questions.
55
00:03:01,120 --> 00:03:03,080
Where is it? Orlando.
56
00:03:03,080 --> 00:03:06,280
Down in Orlando, the Rose and Shingle Creek,
57
00:03:06,280 --> 00:03:10,280
if anyone's listening and they are interested in attending.
58
00:03:10,280 --> 00:03:12,840
We still have some room at the event,
59
00:03:12,840 --> 00:03:16,120
but pleased to say, hotel is sold out.
60
00:03:16,120 --> 00:03:19,080
We've had a really good take rate on this.
61
00:03:19,080 --> 00:03:22,640
Hopefully, if anyone is able to make it down there,
62
00:03:22,640 --> 00:03:26,640
they can find a place to stay and make their way over to the Rose and for the event.
63
00:03:26,640 --> 00:03:29,560
For those that might be considering it next year,
64
00:03:29,560 --> 00:03:33,920
if not this year, how many people are coming?
65
00:03:34,520 --> 00:03:39,280
Final tally, we think is going to be pushing about 140,
66
00:03:39,280 --> 00:03:43,320
150 people, which we're pretty proud of for our first event.
67
00:03:43,320 --> 00:03:45,440
Really weren't sure what to expect,
68
00:03:45,440 --> 00:03:49,120
but the reception so far has been really positive,
69
00:03:49,120 --> 00:03:52,240
on both the customer side and on the partner side.
70
00:03:52,240 --> 00:03:55,480
Yeah. You summed it up well,
71
00:03:55,480 --> 00:04:00,200
to come and to collaborate with one another,
72
00:04:00,200 --> 00:04:02,840
to hear from thought leadership,
73
00:04:02,840 --> 00:04:06,040
best practices, marketing compliance, saving privacy,
74
00:04:06,040 --> 00:04:09,400
but actual use cases,
75
00:04:09,400 --> 00:04:12,760
actual people in positions with how they've dealt with it,
76
00:04:12,760 --> 00:04:14,880
how they've managed it, how they've reduced risk,
77
00:04:14,880 --> 00:04:16,120
how they've increased maturity,
78
00:04:16,120 --> 00:04:19,400
how they've sold it internally at the organizations,
79
00:04:19,400 --> 00:04:23,000
because a lot of these things are shoved in a corner,
80
00:04:23,000 --> 00:04:26,000
or swept under the, that's a bad connotation.
81
00:04:26,000 --> 00:04:32,240
But it's not given the light and the attention it needs until it's too late.
82
00:04:32,240 --> 00:04:37,600
We, at Compliance Women, have been retaining a lot of instances where it was just too late.
83
00:04:37,600 --> 00:04:41,720
There was a big settlement, a big fine, a consent order,
84
00:04:41,720 --> 00:04:45,520
something the organization that was mandated, they had to do because of that.
85
00:04:45,520 --> 00:04:48,880
The whole idea here is lessons learned behind that,
86
00:04:48,880 --> 00:04:51,680
and being proactive,
87
00:04:51,680 --> 00:04:54,240
whether it's with our services or not.
88
00:04:54,240 --> 00:04:57,360
That's one thing I wanted to make clear with all this.
89
00:04:57,360 --> 00:05:01,040
This is about our customer base and learning from each other,
90
00:05:01,040 --> 00:05:06,280
and not a two-day advertisement for Compliance Point or our parent company possible now.
91
00:05:06,280 --> 00:05:11,200
Yeah. Obviously, we'd love to ultimately work with everybody.
92
00:05:11,200 --> 00:05:14,200
That attends or hears about the event.
93
00:05:14,200 --> 00:05:17,040
But when we created this,
94
00:05:17,040 --> 00:05:21,920
we really did focus on making it as educational as possible.
95
00:05:21,920 --> 00:05:24,480
This is not an infomercial.
96
00:05:24,480 --> 00:05:29,440
We will not be talking in depth about our services at all.
97
00:05:29,440 --> 00:05:33,640
Each session really includes experts,
98
00:05:33,640 --> 00:05:40,760
whether they be clients or attorneys or our consultants that are going to speak operationally,
99
00:05:40,760 --> 00:05:44,720
tactically about how companies solve these various challenges,
100
00:05:44,720 --> 00:05:47,920
like you said, how they navigated internally,
101
00:05:47,920 --> 00:05:53,960
what solutions are in the space from an advisory or technology perspective for consideration,
102
00:05:53,960 --> 00:05:56,400
but not with the sales approach.
103
00:05:56,400 --> 00:06:00,840
The goal really is for people to share lessons learned with their peers,
104
00:06:00,840 --> 00:06:06,000
and to be able to take those back and hopefully put them into action at their organization.
105
00:06:06,000 --> 00:06:12,600
One thing that in a weird way excited me and you introduced me to this term,
106
00:06:12,600 --> 00:06:15,760
Chatham House Rules, nothing's being recorded.
107
00:06:15,760 --> 00:06:19,520
These sessions, this is a place of openness,
108
00:06:19,520 --> 00:06:21,680
trust, there's no recordings.
109
00:06:21,680 --> 00:06:26,000
Maybe people can request the slides with permission from the presenter and instances,
110
00:06:26,000 --> 00:06:30,280
but there's no regulators that are going to be there.
111
00:06:30,280 --> 00:06:33,920
This is a free space to discuss these things and really get,
112
00:06:33,920 --> 00:06:38,040
I think, deep down to the nitty gritty of how some of this works,
113
00:06:38,040 --> 00:06:41,720
and how you can accomplish some of these objectives.
114
00:06:41,720 --> 00:06:44,360
It's essentially off the record.
115
00:06:44,360 --> 00:06:45,360
Yeah.
116
00:06:45,360 --> 00:06:49,360
No press, no regulators, nothing recorded.
117
00:06:49,360 --> 00:06:52,760
We have companies that have gone through
118
00:06:52,760 --> 00:06:55,920
federal investigations that have settled those,
119
00:06:55,920 --> 00:07:00,000
some that never even hit the press because they were dropped.
120
00:07:00,000 --> 00:07:03,240
During negotiations, we've had companies that are
121
00:07:03,240 --> 00:07:06,840
constantly dealing with plaintiffs' counsel.
122
00:07:06,840 --> 00:07:10,680
We have the attorneys there that advise these companies,
123
00:07:10,680 --> 00:07:16,120
and then we even have people that are expert witnesses that have really seen under the hood.
124
00:07:16,120 --> 00:07:19,040
All of those people are going to be free to share
125
00:07:19,040 --> 00:07:23,200
their lessons learned because of the Chatham House Rules and the approach that we're taking.
126
00:07:23,200 --> 00:07:29,000
I'm excited to see hopefully the organic conversation,
127
00:07:29,000 --> 00:07:33,640
the true insightful conversation that should result from that.
128
00:07:33,640 --> 00:07:35,080
At least that's the hope.
129
00:07:35,080 --> 00:07:40,160
So the format is going to be main sessions and breakout sessions.
130
00:07:40,160 --> 00:07:42,440
Nothing new or revolutionary there,
131
00:07:42,440 --> 00:07:45,320
but what are, and I'm putting you on the spot here,
132
00:07:45,320 --> 00:07:47,160
but one or two,
133
00:07:47,160 --> 00:07:50,720
two or three up top of your head that you're most excited about.
134
00:07:51,120 --> 00:07:55,480
Yeah, there's the main session track.
135
00:07:55,480 --> 00:07:59,040
Again, we're focused on data privacy and marketing compliance.
136
00:07:59,040 --> 00:08:04,160
So we have some core sessions that we think appeal to both audiences,
137
00:08:04,160 --> 00:08:06,840
and then we've got the separate tracks,
138
00:08:06,840 --> 00:08:08,040
one on data privacy,
139
00:08:08,040 --> 00:08:11,400
the other for the marketing compliance side.
140
00:08:11,400 --> 00:08:16,240
I'll pick a few from each track and then ultimately the main agenda.
141
00:08:16,240 --> 00:08:19,680
As far as the marketing compliance track goes,
142
00:08:19,680 --> 00:08:24,160
there's a session with a team of expert witnesses,
143
00:08:24,160 --> 00:08:30,480
and they are going to talk about what they are seeing with the cases that they're working,
144
00:08:30,480 --> 00:08:34,400
the tactics that they're seeing these plaintiffs' attorneys take,
145
00:08:34,400 --> 00:08:37,280
and ultimately the recommendations that they would have for companies
146
00:08:37,280 --> 00:08:40,080
to avoid having to ultimately engage them.
147
00:08:40,080 --> 00:08:46,480
I think that one's going to be insightful and provide actionable guidance for companies.
148
00:08:46,480 --> 00:08:50,040
On the privacy side,
149
00:08:50,040 --> 00:08:54,040
we have a number of great sessions.
150
00:08:54,040 --> 00:09:03,400
One that I think will be very useful for the audience is on the cookie consent space,
151
00:09:03,400 --> 00:09:11,600
what we're seeing again with plaintiffs' counsel and some of the tactics they're trying to take to trigger lawsuits with companies.
152
00:09:11,600 --> 00:09:17,320
We have our director of privacy as well as outside counsel co-presenting and talking about
153
00:09:17,320 --> 00:09:23,920
basically how to avoid some of those technical pitfalls that often get companies in trouble.
154
00:09:23,920 --> 00:09:26,440
The main agenda I'm really excited about,
155
00:09:26,440 --> 00:09:30,360
we've got an opening session focused on the risks related to AI,
156
00:09:30,360 --> 00:09:35,560
which I know everyone's talking about basically every time you look at the news.
157
00:09:35,560 --> 00:09:42,480
Another one is focusing on federal investigations.
158
00:09:42,480 --> 00:09:49,120
We are going to be walking through that life cycle of a company that
159
00:09:49,120 --> 00:09:54,080
unfortunately had to undergo an investigation from the FTC, the Federal Trade Commission.
160
00:09:54,080 --> 00:09:59,920
We're going to talk about what that was like from the moment they became notified of the investigation,
161
00:09:59,920 --> 00:10:06,920
the counsel that they engaged, how they ultimately navigated that, settled that, and what that resulted in.
162
00:10:06,920 --> 00:10:13,920
That's actually going to include a client of ours and their outside counsel that helped them navigate that.
163
00:10:13,920 --> 00:10:17,920
I'm going to be part of that session talking about how we were able to support the company
164
00:10:17,920 --> 00:10:24,120
and ultimately make sure they could demonstrate to the FTC that they were meeting the requirements.
165
00:10:24,120 --> 00:10:28,760
So that might have been more than we wanted, but I'm learning out of it.
166
00:10:28,760 --> 00:10:32,240
You built it up until we got to the session that you're going to be part of,
167
00:10:32,240 --> 00:10:34,840
and then you gave great emphasis on that.
168
00:10:34,840 --> 00:10:37,840
Yeah, save the best for last.
169
00:10:37,840 --> 00:10:43,200
Okay, question about people, audience and speakers.
170
00:10:43,200 --> 00:10:46,440
So twofold, who are we going to hear from?
171
00:10:46,440 --> 00:10:49,160
You talked a little bit about that already, but just reiterate,
172
00:10:49,160 --> 00:10:53,440
who's going to be speaking in sessions, what gives them the authority to speak on that,
173
00:10:53,440 --> 00:10:58,840
and then who's going to be attending, who's going to be listening, who's going to be in the audience,
174
00:10:58,840 --> 00:11:05,840
who, if you go to this, are you going to be considered sort of future, who are you networking with?
175
00:11:05,840 --> 00:11:09,440
Speaker-wise, really excited about the lineup.
176
00:11:09,440 --> 00:11:18,320
We went to some of our best customers and those that we thought really had experience that they could share with the audience.
177
00:11:18,320 --> 00:11:25,520
We have a really strong lineup of speakers from across our client base, across a variety of industries,
178
00:11:25,520 --> 00:11:32,640
includes in-house counsel, some GC folks, chief privacy officers and so on.
179
00:11:32,640 --> 00:11:35,960
In most sessions, we have more than one client.
180
00:11:35,960 --> 00:11:44,080
We are really trying to, for the audience, share as much as we can about how other companies navigate these challenges.
181
00:11:44,080 --> 00:11:48,160
So where we could, we are getting multiple perspectives on stage.
182
00:11:48,160 --> 00:11:55,040
That's often multiple clients and then usually an attorney or two outside counsel with firms
183
00:11:55,040 --> 00:12:00,680
we've worked with over the years because they're serving the clients that are navigating those challenges.
184
00:12:00,680 --> 00:12:09,800
So a very, we think, strong lineup of customers and attorneys and as well as some of our compliance point consultants.
185
00:12:09,800 --> 00:12:16,920
You know, we work with a lot of companies, we've got a lot of experience and our consultants are going to share their lessons learned.
186
00:12:16,920 --> 00:12:19,200
As far as the audience goes, it's a similar mix.
187
00:12:19,200 --> 00:12:23,880
You've got privacy professionals, marketing compliance professionals, some are legal,
188
00:12:23,880 --> 00:12:26,760
some are compliance, some are technologists.
189
00:12:26,760 --> 00:12:28,520
We think it's a good blend.
190
00:12:28,520 --> 00:12:30,760
Mm hmm.
191
00:12:30,760 --> 00:12:34,440
OK, I think that's a pretty good overview of the event.
192
00:12:34,440 --> 00:12:38,000
Is there any fun that's going to happen?
193
00:12:38,000 --> 00:12:41,760
We're trying to make it fun, you know, data privacy, marketing, compliance.
194
00:12:41,760 --> 00:12:44,720
I don't know how much more fun you can make it.
195
00:12:44,720 --> 00:12:50,840
But, yeah, Monday evening before the event, we've got a nice offsite dinner and reception
196
00:12:50,840 --> 00:12:56,920
and networking event to kind of break the ice with everybody over at the Hard Rock.
197
00:12:56,920 --> 00:13:03,200
And then Tuesday afternoon, we're not holding everybody hostage till five o'clock like some conferences do.
198
00:13:03,200 --> 00:13:09,760
We're going to break a little earlier in the afternoon and transition into another happy hour networking event,
199
00:13:09,760 --> 00:13:18,720
really giving the attendees as much opportunity as we can for them to network, mingle and hopefully build relationships with each other.
200
00:13:18,720 --> 00:13:21,440
Right. Should be great.
201
00:13:21,440 --> 00:13:22,600
Yeah. Looking forward to it.
202
00:13:22,600 --> 00:13:23,960
I'll be there.
203
00:13:23,960 --> 00:13:25,680
You'll be there. You'll be.
204
00:13:25,680 --> 00:13:27,440
And you haven't mentioned this, right?
205
00:13:27,440 --> 00:13:29,240
You've been Mr. Humble.
206
00:13:29,240 --> 00:13:31,520
Don't forget, you're the emcee for the event.
207
00:13:31,520 --> 00:13:32,080
Yes.
208
00:13:32,080 --> 00:13:34,280
So you'll probably be talking more than anybody else.
209
00:13:34,280 --> 00:13:39,960
But that's the least we could do when you've got the host of compliance pointers available.
210
00:13:39,960 --> 00:13:46,640
Well, hopefully I'm not talking more than anybody else, because then there won't be a lot to learn.
211
00:13:46,640 --> 00:13:48,640
All right. Well, thanks for doing this, Matt.
212
00:13:48,640 --> 00:13:52,000
Hopefully this gives a good overview for our viewers and listeners.
213
00:13:52,000 --> 00:13:56,360
And looking forward to seeing some of you at CPX.
214
00:13:56,360 --> 00:14:00,640
And for those of you that we won't see there, hope you consider it in the future.
215
00:14:00,640 --> 00:14:01,800
Thank you.
216
00:14:01,800 --> 00:14:05,480
Everything we discussed is on the website.
217
00:14:05,480 --> 00:14:07,560
You got our compliance point website.
218
00:14:07,560 --> 00:14:08,720
Click on CPX.
219
00:14:08,720 --> 00:14:13,320
You can get basically everything we just discussed in a bit more detail.
220
00:14:13,320 --> 00:14:15,640
And happy to answer any questions.
221
00:14:15,640 --> 00:14:19,640
Yeah, we won't be sending in the recordings because there won't be any.
222
00:14:19,640 --> 00:14:20,840
All off the record.
223
00:14:20,840 --> 00:14:24,800
You'll have to come CPX 2026.
224
00:14:24,800 --> 00:14:25,480
All right.
225
00:14:25,480 --> 00:14:26,400
All right.
226
00:14:26,400 --> 00:14:27,480
See you.
227
00:14:27,480 --> 00:14:49,480
See you.