Categories
Life with GDPR

Episode 33- Lessons Learned in Year 1 of GDPR, Part 3

In this podcast, data privacy/data security expert Jonathan Armstrong and Compliance Evangelist Tom Fox use the framework of GDPR to discuss a wide range of issues relating to these topics. They consider what the US compliance and InfoSec security expert needs to know about what is happening in the UK, Europe and beyond. In this episode, we conclude our three-part series of some of the key lessons learned from the first year of GDPR. Some of the issues and highlights are:
 Remediate then report. The remediation of an issue before reporting can be the key issue for regulators on whether they will move forward with a more public spanking. It is important to show that you have learned lessons and applied them to the facts of your data breach. Don’t try and cheat the victims by imposing new contractual terms such as Equifax did in its recent settlement. Think of the simple way for a data breach to occur, a briefcase left on the Tube.
Don’t Diss the DPA. Why would a company take on the regulator? You must respect the regulator even if you disagree with them. You can make a bad situation worse by attacking the regulators. This does not mean you cannot forcefully argue you position or zealously represent you client but calling regulators idiots in public filings will not help you position or your case.
Keep logs. This is important in case you need to revisit a decision later. Regulators can ask to see these logs at any time, not simply during an investigation or enforcement action. A compliance officer should be involved in the maintenance of the log system. Document Document Document. Unannounced inspections are beginning to occur.
Debrief and Learn. Revisit the facts to see what lessons are to be learned. Continuous improvement. Even on a journey of 1000 miles, it is important to look back. Once again if you make a change due to a breach or other event, document what you have done so you can show the regulators.
For more information on Cordery Compliance, go their website here.
For more information on data breaches, see here.
Also check out the GDPR Navigator, one of the top resources for GDPR Compliance by clicking here.
Categories
The Ethics Movement

Kurt Stitcher on Operation Globalization!

CONVERGE is in its 4th year of bringing together the world’s leading companies for 2 days of dynamic speakers, thought-provoking breakout sessions, and opportunities to connect with like-minded professionals. You will leave the conference with new resources and best practices allowing you to continue the hard work of driving ethics to the center of your business. In today’s episode I visit with Kurt Stitcher, Vice President, Global Compliance at DJO Global, about his upcoming talk, Operation Globalization!
How do you take a US ethics & compliance program and globalize it? Hear from an expert in the trenches with practical tips on operationalizing a program, from policies and standards, anticorruption processes, and risk management and taking a US program to a modern global program. Learn about building relationships not only with the C-Suite level but with business leaders literally across the globe.
For more information on Converge19, click here.

Categories
Compliance Into the Weeds

Some of My Best Friends Are Lawyers

Compliance into the Weeds is the only weekly podcast which takes a deep dive into a compliance related topic, literally going into the weeds to more fully explore a subject. In this episode, Matt Kelly and I go into the weeds to explore what additional educational degrees or certifications  a mid-career compliance professional should consider obtaining to further their career.
Some of the highlights include:

  • How did Matt become interested in this question?
  • What types of additional university degrees will assist the compliance professional?
  • Why a law degree will not help the mid-career compliance professional?
  • Does legal training apply to compliance any longer?
  • Why you should assess your skill set and then move to fill any gaps to become a more well-rounded compliance professional.
  • Why other university disciplines such as behavioral phycology, Human Resources and Risk Management are more valuable than law degrees for the compliance professional.

For additional reading see the following:
Matt’s blog post, Study Law to Advance Compliance Career?,on Radical Compliance.
For more information on Converge19, click here.

Categories
Daily Compliance News

September 18, 2019- the Root Out Corruption edition

In today’s edition of Daily Compliance News:

  • WeWork shelves IPO. (FT)
  • Big government rivalry hampering Big Tech antitrust investigation? (WSJ)
  • How to master office small talk. (NYT)
  • Warren vows to root out corruption in Washington. (Salon)
Categories
The Ethics Movement

Valerie Towery on Cross Functional Collaboration

CONVERGE is in its 4th year of bringing together the world’s leading companies for 2 days of dynamic speakers, thought-provoking breakout sessions, and opportunities to connect with like-minded professionals. You will leave the conference with new resources and best practices allowing you to continue the hard work of driving ethics to the center of your business. In today’s episode I visit with Valerie Tower, VP, Global Compliance and CCO, Visa Global Services Inc. (Visa B2B Connect) about her upcoming talk, Cross-Functional Collaboration.
It may not take a village, but it definitely takes collaboration over a common goal to build a truly robust compliance program. A strong compliance program engages more than just a firm’s compliance officers; this discussion will include practical advice and real examples of how compliance departments— large and small— can work best with their peers in legal, human resources, sourcing, audit, and risk, as well as the internal clients that they serve. In this session, we will consider how the compliance function can remain independent while still working collaboratively with the business and with its peer support functions.
For more information on Converge19, click here.

Categories
Innovation in Compliance

Repurposing Your Way to Great Content with Shaina Weisinger


In today’s show, host Tom Fox speaks with Shaina Weisinger of Repurpose House, a company that repurposes long-form content into optimized social media posts. Shaina had years of experience in digital marketing strategy and established Repurpose House when she realized that her clients wanted repurposed content, a niche in the marketplace that no other company was filling. She chats with Tom about why repurposing is a good strategy, how she built her offshore team and her company’s 5 core principles.

Why Repurpose?
Marketers struggle to consistently create new content for social media. Usually they already have high-quality content that converted and got a lot of engagement. Repurposing proven content is a strategy Shaina specializes in: she takes longer-form content (such as blog posts, webinars and speeches) and breaks them up into many different pieces of content in a way that’s optimized for social media. If you’ve already taken the time to create the content, she says, don’t just let it die.
Building an Offshore Team
Most of Shaina’s team is based in the Philippines.  She only has full-time employees: the company has a comprehensive training program and team leaders who ensure that everyone’s skills are sharpened. Shaina says that it was important to her to build a team where everyone cared about one another, so she hires based on culture fit first. The company has weekly team meetings with everyone so they can connect. Transparency and well-being of the team is very important to her. Tom comments that he gets regular communications from the team and that he feels he has a relationship with them that he values as a customer. When you build good relationships, Shaina responds, that’s when you have great experiences. 
5 Core Principles
Tom asks Shaina to talk about Repurpose House’s 5 core principles, and why she thinks they are important for the business. Shaina says that she wanted her company principles to translate her own life values and goals. These five core principles are:

  1. We actively remain cutting-edge in our market and share our knowledge with excellent educational resources for our industry;
  2. We provide a premier service with clear, streamlined communication that allows for a superior customer and team member experience;
  3. We are positive and optimistic that all events leave room to evolve and grow;
  4. Our culture enables a safe place for both team members and clients to speak honestly and openly, to cultivate a transparent environment of trust;
  5. We are a place where health, well-being and quality of life are not simply concepts but the baseline for all decisions.

Sharing Our Knowledge
Shaina believes that educating people on how to be efficient, and training them to create processes, will bring success. She is passionate about showing businesses and brands how to make their repurposing strategy simple, streamlined and efficient.
Resources
Repurpose House
Shaina on LinkedIn
The Content Coalition Podcast 

Categories
Daily Compliance News

September 17, 2019- the Tax Returns edition

In today’s edition of Daily Compliance News:
  • What is risk? (Lesson #365,333) (NYT)
  • Internal whistleblower files complaint, DNI refuses to turn over to Congress. (Washington Post)
  • Int’l panel chastises FAA over 737 Max approval process. (WSJ)
  • NYC DA subpoenas 8 years of Trump taxes. (MarketWatch)
Categories
The Ethics Movement

Scott McCleskey on Mapping Ethical Risk in Your Organization

CONVERGE is in its 4th year of bringing together the world’s leading companies for 2 days of dynamic speakers, thought-provoking breakout sessions, and opportunities to connect with like-minded professionals. You will leave the conference with new resources and best practices allowing you to continue the hard work of driving ethics to the center of your business. In today’s episode I visit with Scott McCleskey, Senior Vice President / Subject Matter Expert at Eukleia North America. We visit about his talk, Mapping Ethical Risk in Your Organization.
The level of ethical risk is not uniform across an organization or over time – it varies by role, by geography, and by incentive structure. In this presentation, Simon and McCleskey will look at how you can systematically identify and classify the risk across your organization. We’ll also consider the use of the resulting ethical risk heat map as a predictive analytic and how it can be used to take a risk-based approach to allocating controls and how it can be used as a key resource for reporting to the C-suite and the Board.
For more information on Converge19, click here.

Categories
FCPA Compliance Report

Episode 444, Jim Murphy on the Dangers in Using Slack

In this episode I visit with podcast favorite Jim Murphy, who is the VP of Products at Hanzo. We discuss a recent article by Murphy which appeared on Corporate Compliance Insights and was entitled, The Shark in the Wave: Revealing the Lurking Danger of Slack Data.It detailed the dangers from Slack from a compliance and investigative perspective. Highlights from the podcast include:

  1. Murphy’s role at as VP of Products at Hanzo
  2. Why did you write, The Shark in the Wave: Revealing the Lurking Danger of Slack Data?
  3. A discussion of rise of Slack as a common business tool.
  4. What are the dangers in using Slack from the compliance and investigative perspectives?
  5. How can a company think though managing these risks?

For additional reading, see Murphy’s article, The Shark in the Wave: Revealing the Lurking Danger of Slack Data, on Corporate Compliance Insights by clicking here.

Categories
Daily Compliance News

September 16, 2019- the Cool Billion edition

In today’s edition of Daily Compliance News:

  • Boeing Board calls for more safety changes at company. (NYT)
  • How big can a COI be? Disney’s Iger resigns from Apple board. (WSJ)
  • NY AG alleges Sacker family had over $1bn in wire transfers out of Perdue Pharma into private accounts. (Washington Post)
  • Andrew Hill says to have some sympathy for Refinitiv. (FT)