Fall Academy

Nov 4-6, 2026 | Washington, DC

Privacy + Security Forum

George Washington University, 800 21st St NW

Keynotes

Keynote by Carissa Veliz: A Fireside Chat

Carissa Veliz

Keynote by Cindy Cohn: A Fireside Chat

Cindy Cohn

Keynote by Sabrina Ross: A Fireside Chat

Sabrina Ross

Carissa Veliz

Carissa Veliz

Associate Professor, Institute for Ethics in AI
University of Oxford

Cindy Cohn

Cindy Cohn

Former Executive Director
Electronic Frontier Foundation

Sabrina Ross

Sabrina Ross

Chief Privacy Auditor
California Privacy Protection Agency

Wednesday, Nov 4, 2026

Breakfast — Wednesday, Nov 4, 2026: 08:00 AM - 08:50 AM

Breakfast

Morning Workshop — Wednesday, Nov 4, 2026: 08:50 AM - 11:30 AM

AI Governance Workshop

Karen Schuler, Taryn Crane

Session 1.1 — Wednesday, Nov 4, 2026: 08:50 AM - 09:50 AM

How AI Is Affecting Cybersecurity

Megan Kayo, John Morgan, Steve Elovitz, Greg Kaufman

So You Think Children’s Privacy Laws Don’t Apply to Your General Audience Site/Services? Think Again

Nerissa Coyle McGinn, Chanda Marlowe

TBD

TBD

Session 1.2 — Wednesday, Nov 4, 2026: 10:10 AM - 11:10 AM

Be Reasonable! Interpreting Flexible Legal Standards in Privacy and Cybersecurity

Fran Faircloth, Edward Machin

Effective Privacy Counseling at AI-Driven Companies

Katie Cramer, Mariam Abdel-Malek, Ruby Lang, Julie Sweeney

Navigating the Evolving State Privacy Landscape: Latest Developments and Key Trends

Libbie Canter, Liz Lyons, Kate Goodloe, Hanna Abrams

Update on FTC Privacy Enforcement and Policy Development

Reed Freeman, Michelle Bowling

Session 1.3 — Wednesday, Nov 4, 2026: 11:30 AM - 12:30 PM

HIPAA De-Identification at 30: How Healthcare Data Has Changed

Brian Rasquinha, Tiffany Williams, Meera Patel, Erika Klump

Prying Open the Black Box – What Happens When AI Stops Behaving?

Bruce Chiu, Caroline Bailey, Matthew Butkovic, Addison Brown

Strengthening Cybersecurity

Brian Lichter

TBD

James Koenig

The Enforcers Speak: What Is on the Horizon for Privacy Enforcers in the Coming Year

Aaron Charfoos, Jarrod Forgues Schlenker, Chad McHenry

Lunch — Wednesday, Nov 4, 2026: 12:30 PM - 01:30 PM

Lunch

Keynote — Wednesday, Nov 4, 2026: 01:30 PM - 02:30 PM

Keynote by Carissa Veliz: A Fireside Chat

Carissa Veliz

Afternoon Workshop — Wednesday, Nov 4, 2026: 02:30 PM - 05:00 PM

AI Workshop: Advanced Agentic and Generative AI Law, Litigation, and Best Practices to Avoid Liability

Ian Ballon, Ann Staggs

Session 1.4 — Wednesday, Nov 4, 2026: 02:30 PM - 03:30 PM

Cookie Deep Dive: Practical Tips to Maximize Value and Monetize Data While Minimizing Risk

Elliot Golding, Danni Byam

Platform Liability and the New Tech Torts: Emerging Theories in Online Safety Litigation

Matthew Coleman

The Business-Enabling AI Lawyer: Practical Playbooks for Innovation, Risk, and Trust

Wim Nauwelaerts, Heather Kuhn, Kate Whitesell

Update on HIPAA and Health Information Privacy and Security Developments

Adam Greene, Janine Fadul

Session 1.5 — Wednesday, Nov 4, 2026: 04:00 PM - 05:00 PM

Age Assurance in Practice: What We’ve Learned from the First Wave of Global Implementation

Melinda Claybaugh, Daniel Hales, Amber Thomson

Avoiding Ransomware Roulette: Key Questions to Consider Before an Attack

Kamran Salour, Savanna Boyles, Lynn Peachey

Privacy Class Actions: A Product and Defense Counsel’s Playbook

Peter Devlin, Regina Gerhardt

Privacy Issues with Agentic AI

David Rice, Nancy Libin

Reception — Wednesday, Nov 4, 2026: 05:00 PM - 06:00 PM

Welcome Reception

Thursday, Nov 5, 2026

Breakfast — Thursday, Nov 5, 2026: 08:00 AM - 08:50 AM

Breakfast

Morning Workshop — Thursday, Nov 5, 2026: 08:50 AM - 11:10 AM

AI Vendor Compromise Workshop: Live Tabletop Experience

Dr. Vinny Sakore, Brendan McGann, Antony Kim, Paul Otto

Session 2.1 — Thursday, Nov 5, 2026: 08:50 AM - 09:50 AM

Data Brokerage in the AI Economy: Navigating the Evolving Risks and Rewards of Data Monetization

Robert Brown, Jennifer Howes

Fighting Fire with Fire: Leveraging AI to Defend Against AI-Enabled Cyber Attacks

Kate Hanniford, Eban Kaplan

Hot Topics in Health Data Privacy & Security

Christine Moundas

Session 2.2 — Thursday, Nov 5, 2026: 10:10 AM - 11:10 AM

Hire Intelligence: Use of AI in HR and Employment

Jayne Ponder, Carolyn Rashby, Kara Hughley, Talia Saypoff, Marisa Hawley

Journalism’s Impact on the Development of Privacy Law

Kirk Nahra

State AG Enforcement Panel: Tools and Trends

Stephen Provazza, John Eakins, Chandler Crenshaw

The Marketing Privacy Gauntlet: Ad Tech Enforcement, TCPA, CIPA, and AI Advertising Risk in 2026–2027

Darren Abernethy, Colin O’Malley, Leigh Freund

Session 2.3 — Thursday, Nov 5, 2026: 11:30 AM - 12:30 PM

Framework to Launch Gate: How Legal, Compliance, Red Teams, and Infrastructure Leaders Accelerate AI Deployment

Phil Hodgkins, Steven Gawthorpe, James Sherer, Jerry Lavish

Global Privacy, Local Mandates: Privacy and Medical Devices

Isaiah Soval-Levine, Michelle Bazu

Scenarios for Incident Response

Heidi Wachs

Lunch — Thursday, Nov 5, 2026: 12:30 PM - 01:30 PM

Lunch

Keynote — Thursday, Nov 5, 2026: 01:30 PM - 02:30 PM

Keynote by Cindy Cohn: A Fireside Chat

Cindy Cohn

Session 2.4 — Thursday, Nov 5, 2026: 02:30 PM - 03:30 PM

Genetic, Biometric, and Location Data: New Processing Restrictions Create a Minefield of Legal Risks

Nancy Perkins, Cody Venzke

Implications of Chatrie on Government Data Demands and the Market for Location Data

Marc Zwillinger, Laura-Kate Bernstein, Greg Nojeim

Protect Yourself Before the Breach: A Litigator’s Contract Playbook

Michelle Reed

Regulatory Frontier: Cybersecurity in a World of New AI Models

Rohan Massey, Maya Song

The Identity Is the New Perimeter: Responding When the Threat Actor Is a Valid User

Devon Ackerman

Session 2.5 — Thursday, Nov 5, 2026: 04:00 PM - 05:00 PM

Advising Under Pressure: Legal Strategy for Evolving Cyber and AI Threats

Michael Roberts, Peter Carey, Brandon Mullings-Whitaker

Cyber Exposure Intelligence: Using Prior Exposure Data to Challenge Class Standing

Matthew Liebner, Andrew Nauer

Operationalizing California’s Final CCPA Regulations: Cyber Audits, Risk Assessments, and Automated Decision-Making Technology

Colleen Yushchak, Ankur Sheth, Whitney Schneider-White, Danielle Manner

Using Data in the Public Interest: Analytics, Governance, and the Fight Against Fraud

Brian Tengel

Friday, Nov 6, 2026

Breakfast — Friday, Nov 6, 2026: 08:00 AM - 08:50 AM

Breakfast

Session 3.1 — Friday, Nov 6, 2026: 08:50 AM - 09:50 AM

Consumer Rights Are Not a PR Problem — They’re a YOU Problem

Heidi Saas, Melanie Ensign

Features vs. Friction: How to Build Data-Driven Products Without Breaking Your Consent Framework

Jason Henderson, Tom Shebar, Sean Vargas-Barlow

Session 3.2 — Friday, Nov 6, 2026: 10:10 AM - 11:10 AM

Governing AI Agents: Mandate, Gate, Attest Controls at the Tool-Call Boundaries

Jenifer McIntosh, Michelle Dennedy, Matthew Porter

Stories from the Frontline: Lessons from Today’s Cyber Incidents

Mark Seifert, Zoe Hetzner, Kaylee Bankston, Dave Coogan, Tara Swaminatha

The Challenges and Opportunities of Health-Related Advertising

Ali Jessani, Tony Ficarrotta, Robyn Eckerling, Mayra Cavazos

The Road to Compliance: Rethinking Vehicle Architecture under Emerging Connected Car Privacy Laws

Kathryn Linsky, Courtney Manzel, Jim Simatacolos, Lindsay Abate

Session 3.3 — Friday, Nov 6, 2026: 11:30 AM - 12:30 PM

AI-Enabled Detection and Response: From Alert Fatigue to Autonomous Defense

David Faraone

Europe’s Privacy, AI, and Cybersecurity Playbook

Nik Theodorakis, Rohan Massey

No Encryption Required: What Attackers Changed and What Your Playbook Didn’t

Jamie Tolles, Jamie Elbert, Nicholas Cramer

Privacy at the Intersection of Health and Cybersecurity

Lauren Berkebile

Lunch — Friday, Nov 6, 2026: 12:30 PM - 01:30 PM

Lunch

Keynote — Friday, Nov 6, 2026: 01:30 PM - 02:30 PM

Keynote by Sabrina Ross: A Fireside Chat

Sabrina Ross

Session 3.4 — Friday, Nov 6, 2026: 02:30 PM - 03:30 PM

Is De-De-Identification Upon Us?

Ann Waldo, Jordan Wrigley

Strengthening Your AI Governance: Key Lessons and Practical Considerations from the EU AI Act, GDPR and other EU Digital Regulations

Dr. Paul Voigt

Conference Day 1

08:00am-08:50am	Breakfast
08:50am-09:50am	Session 1.1 & Workshop*
09:50am-10:10am	Break
10:10am-11:10am	Session 1.2 & Workshop*
11:10am-11:30am	Break
11:30am-12:30pm	Session 1.3
12:30pm-01:30pm	Lunch
01:30pm-02:30pm	Keynote
02:30pm-03:30pm	Session 1.4 & Workshop*
03:30pm-04:00pm	Ice Cream Social
04:00pm-05:00pm	Session 1.5 & Workshop*
05:00pm-06:00pm	Reception

Conference Day 2

08:00am-08:50am	Breakfast
08:50am-09:50am	Session 2.1 & Workshop*
09:50am-10:10am	Break
10:10am-11:10am	Session 2.2 & Workshop*
11:10am-11:30am	Break
11:30am-12:30pm	Session 2.3
12:30pm-01:30pm	Lunch
01:30pm-02:30pm	Keynote
02:30pm-03:30pm	Session 2.4
03:30pm-04:00pm	Ice Cream Social
04:00pm-05:00pm	Session 2.5

Conference Day 3

08:00am-08:50am	Breakfast
08:50am-09:50am	Session 3.1
09:50am-10:10am	Break
10:10am-11:10am	Session 3.2
11:10am-11:30am	Break
11:30am-12:30pm	Session 3.3
12:30pm-01:30pm	Lunch
01:30pm-02:30pm	Keynote
02:30pm-03:30pm	Session 3.4
03:30pm-04:00pm	Ice Cream Social

*Workshops are extended, 2-hour intensive sessions that provide an in-depth exploration of a topic. Workshops require a separate admission fee.

Go to Top