Key takeaways from IAPP Privacy. Security. Risk. Conference 2024

By Morgan Sullivan

Senior Content Marketing Manager

September 26, 20244 min read

Share this article

We’re back from IAPP’s Privacy. Security. Risk. (PSR) Conference in Los Angeles—still chewing through everything we learned at this whirlwind event. Bringing together hundreds of leaders in privacy and security, IAPP PSR is a critical forum for sharing discussions and insights on emerging industry trends and privacy best practices.

Chatting with folks over three sunny days, we had conversations about everything from the growing importance of preference management, to the urgency behind addressing new regulations like KOSA and COPPA 2.0, to the role of AI governance as legislation around AI tools continues to evolve.

The sense of community and collaboration was palpable. Everyone we spoke with was eager to share best practices, insights, and resources, and we left the floor excited to share our conference highlights, plus a few key takeaways.

Also, did we or did we not get our steps in? IYKYK.

3 key takeaways from the exhibit floor

1.Preference management coming to the fore

As privacy teams look to position themselves as a team that drives value to the business, finding solid preference management solutions has become a clear area of focus.

Throughout PSR, we heard from attendees about how, more and more, they’re being tasked with building transparent consent centers that help build consumer confidence, while offering personalized preference settings that encourage users to opt-down rather than opting-out.

2. Navigating new regulations that protect children online

With new regulations aimed at protecting children’s online data (think KOSA and COPPA 2.0) on the horizon, privacy leaders are beginning to focus on compliance strategies that can keep up with these regulatory shifts.

Both laws introduce stricter requirements for protecting children's data online, including enhanced consent mechanisms, data minimization practices, and transparent communication with parents about data usage and privacy policies.

Conference attendees noted they're honed in on these laws going into the new year, as both are likely to be squarely within regulator's focus.

3. Hunger for practical AI governance strategies

For years now, AI governance has dominated discussions in the privacy sector—with organizations racing to harness the power of AI tools while grappling with their implications for data protection.

But it was clear on the exhibit floor and in listening to panel feedback that, rather than just theoretical frameworks, privacy practitioners are eager for actionable, concrete strategies that support compliance and meaningfully mitigate risks.

Learn more about Transcend’s approach to AI governance.

Compliance vs. customers: Transcend CEO Ben Brook's opening remarks

On day three of the conference, Transcend’s CEO & Co-founder Ben Brook introduced keynote speaker Jenn Louie, Founder of the Moral Innovation Lab and Affiliate at Berkman Klein Center for Internet and Society.

In his opening remarks, Ben posed one critical question: as privacy becomes more complex, should we focus solely on compliance with new regulations, or should we reevaluate our broader privacy strategies to truly serve our customers?

With AI governance on the rise, nearly 70% of Chief Privacy Officers are now involved in these issues, according to IAPP's 2024 report, Ben warned against getting distracted by shiny new innovations.

Instead, he encouraged us to reassess what matters most: the data we collect, the consent we ensure, and the protection of vulnerable populations.

Field Chief Privacy Officer Ron De Jesus explores the metrics that really matter

Three expert voices, Aaron Weller of HP, Lauren Reid of The Privacy Pro, and Avishai Ostrin of TrustIZ, joined Ron De Jesus, Transcend’s Field Chief Privacy Officer, for an insightful session on how privacy leaders can prove their programs ROI using the metrics that really matter.

They covered everything from:

  • How to move away from traditional metrics (number of DSRs fulfilled or PIAs completed) and identify metrics that actually resonate with leadership
  • What different metrics look like across different segments, like B2B, B2C, and strategic consulting
  • How to choose the best metrics for your program
  • How to effectively operationalize your metrics for the long and short term

Find the full slide deck here.

Connecting beyond IAPP Privacy. Security. Risk.

As AI continues to shape the digital landscape and new data protection regulations demand heightened attention to children’s data security, IAPP Privacy. Security. Risk. highlighted the need for a modern and comprehensive approach to tackling these challenges.

Our booth was buzzing with engaging discussions as we explored critical questions and shared insights on privacy's vital role in effective data governance. If you missed us at the conference or were unable to attend this year, don’t hesitate to reach out.

We’re here to help your business foster innovation with trusted data, minimize risks through enhanced automation, and build customer confidence with responsible data practices.


By Morgan Sullivan

Senior Content Marketing Manager

Share this article