Suffering a data breach carries risks beyond data loss. Depending on the breach, civil and criminal charges may result for failing to protect. Effective risk-based corporate compliance might be a mitigating factor. This session will review the elements that demonstrate to investigators an effective compliance program and what steps are needed to design, implement and manage such a program.