Data Security and Privacy Management With Carol Lee, VP of ISACA China, Hong Kong

Organizations must deliver personalized experiences while protecting privacy in a world of tighter regulation and fast-moving AI. The most effective approach is to make privacy part of the process from the start, not an afterthought. When privacy is built into systems from day one, it can strengthen trust, improve customer experiences and reduce risk. This matters now more than ever because privacy laws are becoming stricter across regions, and AI is introducing new concerns around re-identification, biometric data, surveillance and consent. To respond well, organizations need strong privacy-by-design thinking, regulatory awareness, adaptability, technical privacy expertise, and shared accountability across teams.

Key Takeaways:

• Build privacy into the full system lifecycle.
• Recognize that global privacy compliance varies by jurisdiction.
• Address AI-related risks around re-identification, biometrics and consent.