Fall Academy

Nov 4-6, 2026 | Washington, DC

Privacy + Security Forum

George Washington University, 800 21st St NW

Keynotes

Keynote by Cindy Cohn: A Fireside Chat

Cindy Cohn

Keynote by Carissa Veliz: A Fireside Chat

Carissa Veliz

Keynote by Sabrina Ross: A Fireside Chat

Sabrina Ross

Cindy Cohn

Cindy Cohn

Former Executive Director
Electronic Frontier Foundation

Carissa Veliz

Carissa Veliz

Associate Professor, Institute for Ethics in AI
University of Oxford

Sabrina Ross

Sabrina Ross

Chief Privacy Auditor
California Privacy Protection Agency

Wednesday, Nov 4, 2026

Breakfast — Wednesday, Nov 4, 2026: 08:00 AM - 08:50 AM

Breakfast

Morning Workshop — Wednesday, Nov 4, 2026: 08:50 AM - 11:10 AM

AI Governance Workshop

Karen Schuler, Taryn Crane

Session 1.1 — Wednesday, Nov 4, 2026: 08:50 AM - 09:50 AM

How AI Is Affecting Cybersecurity

Megan Kayo, John Morgan, Steve Elovitz, Greg Kaufman

Show Me the Money: Privacy, Security and AI in Financial Services

Roshni Patel, Alex Cox

So You Think Children’s Privacy Laws Don’t Apply to Your General Audience Site/Services? Think Again

Nerissa Coyle McGinn, Chanda Marlowe, Amelia Vance

Session 1.2 — Wednesday, Nov 4, 2026: 10:10 AM - 11:10 AM

AI on the Line: Legal Issues for Inbound and Outbound Voice Agents

Jocelyn Aqua, Alex Tate

Be Reasonable! Interpreting Flexible Legal Standards in Privacy and Cybersecurity

Fran Faircloth, Edward Machin

Effective Privacy Counseling at AI-Driven Companies

Katie Cramer, Mariam Abdel-Malek, Ruby Lang, Julie Sweeney

Navigating the Evolving State Privacy Landscape: Latest Developments and Key Trends

Libbie Canter, Liz Lyons, Kate Goodloe, Hanna Abrams

Update on FTC Privacy Enforcement and Policy Development

Reed Freeman, Perry Jackson

Session 1.3 — Wednesday, Nov 4, 2026: 11:30 AM - 12:30 PM

AI Under Fire: Emerging Risks, Real-World Incidents, and Practical Response Strategies

Brian Lichter, Kim Peretti, Noah Rubin

Heavy Data Ahead: Navigating the Uncertain Privacy, Security and AI Waters Under a Stormy FTC. Is Your Ship Safe?

James Koenig, Joel Lutz, Laura Hamady

HIPAA De-identification at 30: How Data has Changed, and What to Do About It

Brian Rasquinha, Tiffany Williams, Meera Patel, Erika Klump

Prying Open the Black Box – What Happens When AI Stops Behaving?

Bruce Chiu, Caroline Bailey, Matthew Butkovic, Addison Brown

The Enforcers Speak: What is on the Horizon for Privacy and Cybersecurity Enforcers in the Coming Year

Aaron Charfoos, Jarrod Forgues Schlenker, Chad McHenry

Lunch — Wednesday, Nov 4, 2026: 12:30 PM - 01:30 PM

Lunch

Keynote — Wednesday, Nov 4, 2026: 01:30 PM - 02:30 PM

Keynote by Cindy Cohn: A Fireside Chat

Cindy Cohn

Afternoon Workshop — Wednesday, Nov 4, 2026: 02:30 PM - 05:00 PM

AI Workshop: Advanced Agentic and Generative AI Law, Litigation, and Best Practices to Avoid Liability

Ian Ballon, Ann Staggs, Doug Smith

Session 1.4 — Wednesday, Nov 4, 2026: 02:30 PM - 03:30 PM

Cookie Deep Dive: Practical Tips to Maximize Value and Monetize Data While Minimizing Risk

Elliot Golding, Danni Byam, Rahel Kifle

Platform Liability and the New Tech Torts: Emerging Theories in Online Safety Litigation

Matthew Coleman

The Business-Enabling AI Lawyer: Practical Playbooks for Innovation, Risk, and Trust

Wim Nauwelaerts, Heather Kuhn, Kate Whitesell

Update on HIPAA and Health Information Privacy and Security Developments

Adam Greene, Janine Fadul

Session 1.5 — Wednesday, Nov 4, 2026: 04:00 PM - 05:00 PM

Age Assurance in Practice: What We’ve Learned from the First Wave of Global Implementation

Melinda Claybaugh, Daniel Hales, Amber Thomson

Avoiding Ransomware Roulette: Key Questions to Consider Before an Attack

Kamran Salour, Savanna Boyles, Lynn Peachey

Privacy Class Actions: A Product and Defense Counsel’s Playbook

Peter A. Devlin, Regina Gerhardt

Privacy Issues with Agentic AI

David Rice, Nancy Libin

Reception — Wednesday, Nov 4, 2026: 05:00 PM - 06:00 PM

Welcome Reception

Thursday, Nov 5, 2026

Breakfast — Thursday, Nov 5, 2026: 08:00 AM - 08:50 AM

Breakfast

Morning Workshop — Thursday, Nov 5, 2026: 08:50 AM - 11:10 AM

Workshop: AI Vendor Compromise: Live Tabletop Experience

Dr. Vinny Sakore, Brendan McGann, Antony Kim, Paul Otto

Session 2.1 — Thursday, Nov 5, 2026: 08:50 AM - 09:50 AM

Data Brokerage in the AI Economy: Navigating the Evolving Risks and Rewards of Data Monetization

Robert Brown, Jennifer Howes

Fighting Fire with Fire: Leveraging AI to Defend Against AI-Enabled Cyber Attacks

Kate Hanniford, Eben Kaplan, Sara Sendek

Hot Topics in Health Data Privacy & Security

Christine Moundas

Session 2.2 — Thursday, Nov 5, 2026: 10:10 AM - 11:10 AM

Hire Intelligence: Use of AI in HR and Employment

Jayne Ponder, Carolyn Rashby, Kara Hughley, Talia Saypoff, Marisa Hawley

Journalism’s Impact on the Development of Privacy Law

Kirk Nahra

State AG Enforcement Panel: Tools and Trends

Stephen Provazza, John Eakins, Chandler Crenshaw, Ryan Kriger

The Marketing Privacy Gauntlet: Ad Tech Enforcement, TCPA, CIPA, and AI Advertising Risk in 2026–2027

Darren Abernethy, Colin O’Malley, Leigh Freund

Session 2.3 — Thursday, Nov 5, 2026: 11:30 AM - 12:30 PM

Framework to Launch Gate: How Legal, Compliance, Red Teams, and Infrastructure Leaders Accelerate AI Deployment

Phil Hodgkins, Steven Gawthorpe, James Sherer, Dave Cohen

Global Privacy, Local Mandates: Privacy and Medical Devices

Isaiah Soval-Levine, Michelle Bazu, Theodore Yale

Is This Actually Privileged? Cyber Incidents, Risk Assessments, AI Failures, and the Limits of Attorney-Client Privilege

Hannah Levin

Lights, Camera, Action! Real-World Cybersecurity Lessons from the Movies

Heidi Wachs, Colin Meek, Mike Borgia

Strengthening Your AI Governance: Key Lessons and Practical Considerations from the EU AI Act, GDPR and other EU Digital Regulations

Dr. Paul Voigt, Dajin Lie

Lunch — Thursday, Nov 5, 2026: 12:30 PM - 01:30 PM

Lunch

Keynote — Thursday, Nov 5, 2026: 01:30 PM - 02:30 PM

Keynote by Carissa Veliz: A Fireside Chat

Carissa Veliz

Session 2.4 — Thursday, Nov 5, 2026: 02:30 PM - 03:30 PM

Genetic, Biometric, and Location Data: New Processing Restrictions Create a Minefield of Legal Risks

Nancy Perkins, Cody Venzke, Danielle Manner

Implications of Chatrie on Government Data Demands and the Market for Location Data

Marc Zwillinger, Laura-Kate Bernstein, Greg Nojeim, Paula Weil

Protect Yourself Before the Breach: A Litigator’s Contract Playbook

Michelle Reed, Lauren York

Regulatory Frontier: Cybersecurity in a World of New AI Models

Rohan Massey, Maya Song, Annie Chiang

TBD

Daniel Felz

The Identity Is the New Perimeter: Responding When the Threat Actor Is a Valid User

Devon Ackerman, Carly Battaile, Kate Hanniford, Mariah Leffingwell

Session 2.5 — Thursday, Nov 5, 2026: 04:00 PM - 05:00 PM

Advising Under Pressure: Legal Strategy for Evolving Cyber and AI Threats

Michael Roberts, Peter Carey, Brandon Mullings-Whitaker

Beyond Diligence: The Privacy, Cyber, and AI Operating Plan from Day 1 to Exit

Olivia Greer, Kaitlin Descovich, Lindsay Monti

Operationalizing California’s Final CCPA Regulations: Cyber Audits, Risk Assessments, and Automated Decision-Making Technology

Colleen Yushchak, Ankur Sheth, Whitney Schneider-White, Danielle Manner

The Evolving Breach Litigation Battleground: Class Action Trends, Novel Arguments & Leveraging Historical Breach Intelligence

Andrew Nauer, Jill Fertel, Matteo Tomasini

Using Data in the Public Interest: Analytics, Governance, and the Fight Against Fraud

Brian Tengel, Emilio Cividanes, Jason Kratovil, Ken Meiser, Susanna Parker

Friday, Nov 6, 2026

Breakfast — Friday, Nov 6, 2026: 08:00 AM - 08:50 AM

Breakfast

Session 3.1 — Friday, Nov 6, 2026: 08:50 AM - 09:50 AM

Consumer Rights Are Not a PR Problem — They’re a YOU Problem

Heidi Saas, Melanie Ensign

Features vs. Friction: How to Build Data-Driven Products Without Breaking Your Consent Framework

Jason Henderson, Tom Shebar, Sean Vargas-Barlow

Millions at Stake: Managing Third-Party and Mega Data Breach Notifications

Elliot Black, Benjamin Perry, Amy Mushahwar

Session 3.2 — Friday, Nov 6, 2026: 10:10 AM - 11:10 AM

Governing AI Agents: Mandate, Gate, Attest Controls at the Tool-Call Boundaries

Jenifer McIntosh, Michelle Dennedy, Matthew Porter

Stories from the Frontline: Lessons from Today’s Cyber Incidents

Mark Seifert, Zoe Hetzner, Kaylee Bankston, Dave Coogan, Tara Swaminatha

The Challenges and Opportunities of Health-Related Advertising

Ali Jessani, Tony Ficarrotta, Robyn Eckerling, Mayra Cavazos

The Road to Compliance: Rethinking Vehicle Architecture under Emerging Connected Car Privacy Laws

Kathryn Linsky, Courtney Manzel, Jim Simatacolos, Lindsay Abate

Session 3.3 — Friday, Nov 6, 2026: 11:30 AM - 12:30 PM

AI-Enabled Detection and Response: From Alert Fatigue to Autonomous Defense

David Faraone, Mike Saxton, George Platsis

Data, Risk, and Trust: Lessons from Former Federal Leaders

Lauren Berkebile, Eric Hagopian

Europe’s Privacy, AI, and Cybersecurity Playbook

Nik Theodorakis, Rohan Massey

No Encryption Required: What Attackers Changed and What Your Playbook Didn’t

Jamie Tolles, Jamie Elbert, Nicholas Cramer

Lunch — Friday, Nov 6, 2026: 12:30 PM - 01:30 PM

Lunch

Keynote — Friday, Nov 6, 2026: 01:30 PM - 02:30 PM

Keynote by Sabrina Ross: A Fireside Chat

Sabrina Ross

Session 3.4 — Friday, Nov 6, 2026: 02:30 PM - 03:30 PM

Is De-De-Identification Upon Us?

Ann Waldo, Jordan Wrigley

Untangling the Kids’ Privacy Web: A Look at Recent Developments

Janis Kestenbaum, Stephanie Duchesneau

When Ransomware Hits the Ward: The Ransomware Epidemic and Patient Data

Domenic Paci, Karla Reffold, Jon Knight

Conference Day 1

08:00am-08:50am	Breakfast
08:50am-09:50am	Session 1.1 & Workshop*
09:50am-10:10am	Break
10:10am-11:10am	Session 1.2 & Workshop*
11:10am-11:30am	Break
11:30am-12:30pm	Session 1.3
12:30pm-01:30pm	Lunch
01:30pm-02:30pm	Keynote
02:30pm-03:30pm	Session 1.4 & Workshop*
03:30pm-04:00pm	Ice Cream Social
04:00pm-05:00pm	Session 1.5 & Workshop*
05:00pm-06:00pm	Reception

Conference Day 2

08:00am-08:50am	Breakfast
08:50am-09:50am	Session 2.1 & Workshop*
09:50am-10:10am	Break
10:10am-11:10am	Session 2.2 & Workshop*
11:10am-11:30am	Break
11:30am-12:30pm	Session 2.3
12:30pm-01:30pm	Lunch
01:30pm-02:30pm	Keynote
02:30pm-03:30pm	Session 2.4
03:30pm-04:00pm	Ice Cream Social
04:00pm-05:00pm	Session 2.5

Conference Day 3

08:00am-08:50am	Breakfast
08:50am-09:50am	Session 3.1
09:50am-10:10am	Break
10:10am-11:10am	Session 3.2
11:10am-11:30am	Break
11:30am-12:30pm	Session 3.3
12:30pm-01:30pm	Lunch
01:30pm-02:30pm	Keynote
02:30pm-03:30pm	Session 3.4
03:30pm-04:00pm	Ice Cream Social

*Workshops are extended, 2-hour intensive sessions that provide an in-depth exploration of a topic. Workshops require a separate admission fee.

Go to Top