Conference Description
Key Takeaways
- Practitioner-led summit addressing AI-driven data protection challenges and evolving security requirements
- Focus areas include AI system data flows, regulatory compliance, breach response and third-party risk management
- Speakers from financial services, healthcare, biotechnology and technology sectors
- Format combines keynotes, roundtables, scenario exercises and structured networking
- Takes place in New York on 19 November 2026
Introduction
The New York AI Security and Data Protection Summit brings together data protection, privacy, security and governance professionals to examine the operational and regulatory pressures created by artificial intelligence adoption. Scheduled for November 2026, the event addresses a critical inflection point for organisations deploying AI systems that interact with sensitive data across increasingly complex environments.
As AI tools become embedded in enterprise workflows, they introduce new vectors for data exposure. Models trained on proprietary information, automated systems that replicate sensitive records into cloud environments, and AI-powered third-party services all create governance challenges that traditional data protection frameworks were not designed to address. This summit focuses specifically on how practitioners are adapting their strategies to manage these emerging risks.
About This Event
The summit follows a peer-led format designed to facilitate direct knowledge exchange between practitioners rather than vendor-driven presentations. The programme includes practitioner keynotes, peer roundtables, interactive panels and a live scenario exercise that allows attendees to work through realistic incident response situations. A closing think tank session provides an opportunity for collective problem-solving on persistent challenges, while structured networking and optional one-to-one meetings enable deeper conversations between participants.
Speakers confirmed for the event represent organisations spanning financial services, healthcare, biotechnology and media. Contributors from TIAA, Bank of America, Booking Holdings Financial Services, New York-Presbyterian Hospital, Arch Capital Group, Legend Biotech, TKO, Veracyte and Farther will share operational insights on current approaches, implementation failures and necessary changes to data protection strategy.
AI Systems and Data Protection Challenges
The proliferation of AI systems within enterprise environments has fundamentally altered the data protection landscape. Large language models, machine learning pipelines and AI-powered automation tools frequently require access to sensitive datasets for training, fine-tuning or inference. This creates scenarios where confidential information may be copied, cached or processed in environments with different security controls than the original data stores.
Cross-border data flows add further complexity, particularly for multinational organisations subject to varying regulatory regimes. The interaction between AI governance requirements and existing privacy frameworks such as GDPR, state-level US privacy laws and sector-specific regulations creates compliance challenges that demand coordinated responses across legal, security and technology functions.
Third-Party Risk and Regulatory Scrutiny
Third-party risk management has become increasingly difficult as organisations integrate AI services from external providers. Vendor AI systems may process, store or learn from client data in ways that are not always transparent, raising questions about data residency, model training practices and downstream liability. The summit addresses how practitioners are evaluating and monitoring these relationships.
Regulatory attention on AI and data protection continues to intensify. Enforcement actions, new guidance documents and proposed legislation are reshaping compliance expectations. Breach response protocols must now account for AI-specific scenarios, including incidents involving model poisoning, training data extraction or unintended memorisation of sensitive information.
Who Should Attend
The New York AI Security and Data Protection Summit is designed for senior professionals responsible for data protection, privacy, information security and governance within their organisations. The practitioner-focused format and cross-industry speaker roster make it particularly relevant for those navigating AI adoption while maintaining robust data protection standards. With representation from financial services, healthcare and biotechnology, attendees can expect discussions grounded in the operational realities of highly regulated industries.