What to Consider when Designing a Privacy Compliance Program

by Bebe Vanek, Privacy Attorney for University of Utah Hospital

A successful privacy compliance program isn’t one that never experiences a breach – although that would be ideal. What makes a privacy compliance program successful is what happens before a breach: anticipating a breach, preparing for the worst, and expecting the best of your compliance team. This presentation will highlight several factors to consider when designing a privacy compliance program, explored through the lens of a regulated entity in health care. Exploring federal bulletins showcasing examples of high and low impact violations of a federal health information privacy law, participants will learn about engaging stakeholders, evaluating internal policies, conducting audits, and more, as a guide to understanding the key aspects and framework of a successful privacy compliance program. Participants will also gain a high level understanding of the U.S privacy law patchwork, speculation about a uniform federal privacy policy, while noting the complexity of the changing landscape of US privacy law and best practices for staying informed.

Ideal for:
Any level of OP experience, those wanting to see how others navigated change management and gained buy-in around privacy compliance at their company


Bebe Vanek

Bebe Vanek isn’t your typical lawyer – she’s driven by values, rather than just value-add. As a privacy professional in a regulated industry, Bebe is serious about creating successful compliance programs – especially when it comes to protecting client privacy. From litigation to contracts, Bebe brings humor and compassion to her work, focusing on improving systems and inspiring teams.

With a decade of legal experience, Bebe’s unique perspective on the law and people, highlights the importance of relationships and preparation, being fearless in execution, and finding system weaknesses and barriers to compliance. A Californian turned Washington hippie (by way of a 13 year layover in Utah); Bebe enjoys unplugging in her downtime. When she’s not listening to privacy podcasts, you can find her trail running, fermenting kimchi, or volunteering with rescued farmed animal sanctuaries with her kids.

Panel Discussion with Q&A on Navigating Privacy Compliance

By: Rezwan Ud-Din VP Global Privacy Platform Engineering – Goldman Sachs; Elizabeth Sexton, Principal Product Manager -Adobe; Amy Lewis, Sr. Consultant – Berkeley Research Group

Hear from industry leaders on how to create a culture of compliance at your company. Going over the basics, and including time for Q&A from attendees, we’ll hear about how these massive organizations keep a pulse on data privacy compliance changes, who is responsible, what processes are in place to ensure compliance throughout their orgs. Learn how respecting data privacy preference results in better trust and relationships between your brand and your customers.

Ideal for:
Any level of expertise on ObservePoint, those responsible for or interested in data privacy compliance


Rezwan Ud-Din

Goldman Sachs, Vice President – Global Co-lead of Privacy Platform Engineering

Rezwan has been working in various engineering roles at Goldman Sachs (GS) for over 25 years leading teams building best in class applications for the Financial Industry. He has worked for several divisions in GS on both the buy and sell sides of the firm with multi-year stints in London & Singapore and is currently based in Toronto, Canada. For the last 3 years he has led the Privacy Platform Engineering team to enable commercial opportunities and regulatory compliance by protecting client and employee personal and private data. Rezwan has a BSc in Computer Science from Kings College London.

Elizabeth A. Sexton

Principal Product Manager, Adobe

Elizabeth A. Sexton is a Principal Product Manager specializing in regulated industries and privacy for Adobe Digital Experiences business. Elizabeth works on global privacy regulations empowering Adobe customers with tools and capabilities to implement privacy befitting the organizations core values. Elizabeth is a versatile, energetic and creative leader, with more than 20 years of leadership experience. Elizabeth has a proven proficiency as an adaptable leader across privacy, healthcare, data management, infrastructure development and growth, and clinical research. Elizabeth holds an Executive Master of Business Administration from the University of Utah as well as a Master of Arts from the University of North Dakota. She is active in the privacy and healthcare, participating on panels, boards and volunteering her time.

Amy Lewis

Sr. Consultant, Berkeley Research Group

CIPP/E, CIPP/US, CIPM

Amy Lewis is a Senior Managing Consultant with BRG’s Data Privacy practice, where she partners with clients to develop comprehensive privacy compliance programs bridging state, federal, and global data privacy laws. Amy’s privacy programs are founded on the principles underlying most privacy regulations, giving clients the agility to meet new privacy compliance demands as they arise in an evolving legal landscape. Amy also helps clients with data breach response, bridging the divide between technology, business, and legal teams to respond quickly while minimizing the risk to the business and to affected individuals.

Using ObservePoint to help with Privacy Compliance

By TBD

Watch as one of our most privacy-centric customers showcases how they use ObservePoint to help keep on top of ever-changing data privacy laws.

Ideal for:
Any level of expertise on ObservePoint, those responsible for or interested in data privacy compliance

Using ObservePoint Actions for Custom Data Insights

By Mike Maziarz & Clint Eagar

In this interactive breakout session, participants will explore various use cases of collecting custom data during ObservePoint scans. Attendees will gain practical knowledge and skills to implement data collection techniques to address specific needs.

What we’ll cover:

  • Technical SEO by collecting and analyzing relevant data
  • Ensuring ADA compliance through data collection for accessibility analysis
  • Monitoring tag performance and tracking analytics using custom data
  • Search for important keywords or phrases
  • Detecting and handling broken images
  • Safeguarding user privacy by securely handling Personally Identifiable Information (PII)

Ideal for:
All levels welcome, but content will be the type to be executed by Intermediate to Advanced ObservePoint Users. Participants will benefit from having a basic understanding of HTML, CSS, and JavaScript. It is recommended that participants bring their laptops.

Target Audience:
This breakout session is suitable for web developers, software engineers, digital marketers, SEO specialists, and anyone interested in leveraging JavaScript to collect custom data from web browsers for specific use cases.


Mike Maziarz

Senior Product Manager

Mike is a seasoned professional with a robust background in product management owning and launching several new products. Prior to this role Mike showcased exemplary performance as a Customer Success Manager at ObservePoint. With a notable tenure at Vivint, Mike acquired extensive expertise in business intelligence that drives his metric based approach to this day. Alongside his professional achievements, Mike enjoys time engaging in sports, with a particular passion for mountain biking, golf and pickle ball.

Clint Eagar

Sr. Product Manager & Product Ops

Clint specializes in product analytics, helping ObservePoint understand how customers are using our products and how we can improve their experience. With over 12 years of experience on the ObservePoint platform, Clint has had a major hand in the growth & improvement of the ObservePoint platform since its inception. Clint keeps busy with his six children, loving wife, two dogs, and an extremely long list of hobbies: elk hunting, hiking, mountain biking, snow skiing, water skiing, archery, and canyoneering. (Pretty standard for any proud Utahan!)

Bridging Vision and Implementation: Harnessing the Power of ObservePoint’s API

By Jarrod Wilbur & Sam Valind, Room & Board

Both CEOs and backend developers will leave this session equipped with actionable insights and strategies to leverage ObservePoint’s API effectively. Uncover the potential to positively impact your company’s P&L, enhance customer experiences, and drive growth, all while quantifying the results in a language that resonates with both the boardroom and the backend. Don’t miss this opportunity to bridge the gap between vision and implementation with ObservePoint’s API.

Ideal for:
This session is designed to be approachable for both customers and prospective customers, and relevant to any level of technical expertise. This session will be valuable to everyone from CEOs to backend developers. Please don’t shy away even if you’d likely not implement an API on your own.


Sam Valind

Sr. Data Architect

Sam Valind is the Senior Data Architect for Business Intelligence at Room & Board with a history of working with the biggest players in healthcare and real estate. Sam has spent her time in the industry driving implementation, data integration and automation to give companies a competitive edge and improve customer experiences. Sam has focused her career on leveraging automation and optimization to impact each company’s bottom line through revenue generation, spend optimization and cost savings.

Jarrod Wilbur

Sr. Solutions Architect

Jarrod Wilbur is a Sr. Solutions Architect at Observepoint. He has been with ObservePoint since 2018. His role places him in front of customers daily, developing solutions that solve problems. He uses the ObservePoint API and many others on a daily basis. Jarrod enjoys the same slew of outdoor activities most Utah residents do, and has trademarked a 6th love language: Papusas.

ObservePoint Rockstars

By Cameron Cowan

Speed dating meets tech conference. Join us along with 5 of the best ObservePoint users in our customer base as they show off their coolest ObservePoint hacks. These rapid fire, high level demos will show you their unique problem to solve, how they used ObservePoint to solve it, and how this solution made a difference on their team.

Ideal for:
Intermediate or Advanced ObservePoint users who are looking for creative ways to use ObservePoint in their companies

Target Audience:
This breakout session is suitable for anyone who is familiar with ObservePoint. It is likely that the content might be too advanced for a beginner user to reproduce, but will show a beginner user what is possible once they are more familiar with the tool. Demos in this session will cover all the bases – marketing, analytics, privacy, and more.


Li Evans

Senior Manager, Digital-Experience Platforms, Adobe and Martech

Liana “Li” Evans is an industry seasoned (17+ years) multi-solutionist specializing in Client Digital Experiences (CDX) focusing on the suite of Adobe Experience Cloud products and CDPs. As a recovering programmer & data base administrator, she fell into digital marketing, bridging the technical with the imaginative and ended up writing a book for Que Press, “Social Media Strategies: Engaging Strategies for Facebook, Twitter & Other Social Media”. She loves teaching teams (both internal and external) on how to utilize and capitalize on leveraging Mar-Tech technologies to not only create impactive customer experiences, but also improve ROI for client strategic initiatives.

Cameron Cowan

Senior Director, Product Strategy

Cameron Cowan is the Sr. Director of Product Strategy at ObservePoint and a veteran of the marketing analytics, digital advertising, and enterprise software industries. He plays an active role in product management, technical marketing, and GTM execution. Prior to his time at ObservePoint, Cameron spent 13 years working for Adobe (via the Omniture acquisition), and gained experience in account management, consulting, and technical sales before establishing himself as a leader in product management, technical marketing, and business strategy. His career has included living overseas on multiple occasions and collaborating with marketers and technologists on four continents.

Opening Keynote

Tuesday, Sept 26 & Wednesday, Sept 27 9:00am

Join us for inspiring messages from the ObservePoint team, as well as a panel of privacy experts. Listen as industry leaders discuss where privacy is going, and how to keep up with this rapidly changing environment.


Keynote Speaker

Join us for inspiring messages from the ObservePoint team, as well as a panel of privacy experts. Listen as industry leaders discuss where privacy is going, and how to keep up with this rapidly changing environment.


Chris Bramwell

Chief Privacy Officer for the State of Utah

Chris Bramwell is the Chief Privacy Officer for the State of Utah, appointed by Governor Cox, and is responsible for ensuring state agencies protect the privacy rights of Utahns. His role has placed him at the nexis of stakeholders that are defining the future of privacy in Utah.  Chris envisions a future where privacy is a feature of Utah and people will choose to live and work in  the state because they are confident in their “right to be let alone”.

Heather Allen

Director of Privacy Management & Privacy Officer at CHG Healthcare

Heather Allen is the Director of Privacy Management & Privacy Officer at CHG Healthcare, a locum tenens staffing company, where she leads initiatives related to privacy evangelism by way of collaboration with the product, data governance and information security teams and interactive education opportunities. Prior to CHG Healthcare, Heather was the Manager of Privacy for the Corporate Compliance team at Intermountain Healthcare, managing the team responsible for investigations, education and audits for their then seven hospitals and 295 medical group clinics. She was also the Senior Manager and Privacy Officer for 1-800 Contacts, Inc. where she lead out on implementing the privacy program and collaborating with various teams to become a covered entity under HIPAA.

Heather received her B.A. from Utah Valley University and her MBA from Western Governors University. She is a Certified Information Privacy Professional (CIPP/US) Certified Information Privacy Manager (CIPM) and Fellow of Information Privacy (FIP) through IAPP, Certified in Healthcare Privacy Compliance through Health Care Compliance Association (HCCA), and Certified Data Privacy Solutions Engineer (CDPSE) through ISACA. She enjoys interacting and collaborating with other privacy, security and data governance professionals.

Stephanie Geisler

Owner, Stephanie Geisler Coaching & Vistage Chair

Stephanie is currently the owner of a CEO Coaching and CEO Peer Group practice here in the Salt Lake City area. Prior to her work with CEOs, she was the owner/founder of three other companies, one of them growing to $25M in annual revenue by its third year, landing #125 on the Inc 500 in 2010. Stephanie was named an Ernst & Young Entrepreneur of the Year Finalist in 2009. She has been at the President and C-level of various companies in the technology, medical, manufacturing, design, and beauty industries. Stephanie was recruited to lead the Full-Time MBA program at the University of Utah as its executive director and led that program for 6 years, leading the team that moved the national ranking from #79 to #36 in just three years. She served simultaneously as the director of the Women’s MBA Association. Mom of four humans and two canine kids, Stephanie is loving her work coaching CEOs so they don’t have to face their leadership challenges alone.