Jeff Crume explains how AI agents, RAG pipelines, prompts, tools, and models move sensitive data through modern AI systems, and why traditional DLP falls short. He outlines a unified approach built on data lineage, workload and workforce visibility, proactive risk identification, and compliance reporting.
Bilge Yücel explains that true AI sovereignty is a technical challenge, not just a policy issue, built on four pillars: data, model, infrastructure, and operations. This talk explores the common pitfalls of retrofitting sovereignty—from performance regressions after swapping models to discovering deep vendor lock-in when moving on-prem—and presents a checklist for building genuinely sovereign systems.
Qinge Xie from Georgia Tech presents a large-scale evaluation of modern website privacy policies using a novel LLM-based framework. The research systematizes privacy practices from 10 major US and EU regulations into 34 clauses and analyzes over 100,000 websites to reveal current trends in data collection, sharing, and consumer rights disclosure.