Alan Tang is a Principal Research Director at Info-Tech Research Group. He specializes in establishing and operationalizing risk-based and actionable privacy frameworks and programs in alignment with global privacy laws, regulations, and standards such as GDPR, CCPA, PIPEDA, PIPL, LGPD, GAPP, ISO 27701, NIST PF, and more. He believes in simplifying, automating, and scaling privacy controls to enable business growth.

Alan has over 20 years of experience devoted to privacy and security practices. Prior to joining Info-Tech Research Group, Alan was the global privacy lead of a Fortune 50 international company. In this role, he led a team of privacy professionals to establish an enterprise-wide, unified privacy framework and program that have been implemented in 50+ countries through three phases. He has a strong history working with business leaders in a wide range of privacy-related domains such as privacy strategy and roadmaps, privacy impact assessments and data protection impact assessments, privacy policies and procedures, privacy by design in the software development lifecycle, data subject rights assurance, data retention, data disclosure and sharing, data cross-border transfer, data security protection, privacy awareness training, data breach handling, etc.

Alan holds a Ph.D. in Information Security and an MBA from Sofia University. Alan also holds numerous privacy and security designations including FIP, CIPP/E, CIPP/US/C, CIPM, CIPT, CISSP, CISA, PMP, and previously ISO27001LA and PCI DSS QSA.

Fritz is a Principal Cybersecurity Advisor with over 20 years’ experience in security, risk management, and privacy program management.

Throughout his operational tenure, Fritz worked primarily in regulated industries including financial, telecommunication, and oil and gas.

Prior to joining Info-Tech, Fritz was the Chief Information Security Officer for the Globe and Mail, and previous experience included responsibility as a security officer for Toronto Dominion Bank, Blackberry, The ATCO Group, and Info-Tech Research Group.

Fritz has gathered a wide range of tactical cybersecurity experience, leading enterprise-wide initiatives around information security strategy, security policy, governance, compliance, and risk management.

Fritz has been a certified instructor with the Canadian Red Cross for over ten years, and he is a frequent guest lecturer on security and privacy, including delivering a recent workshop as a guest lecturer on data security at the University of Guelph and at the Toronto Chapter of the Information Systems Audit and Control Association (ISACA).

Fritz holds numerous industry certifications including Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), Certified Information Privacy Manager (CIPM), Certified Data Privacy Solution Engineer (CDPSE), and Certified Disaster Management Instructor with the Canadian Red Cross.

He is an active member of the International Information Systems Security Certification Consortium (ISC²), the Information Systems Audit and Control Association (ISACA), and the International Association of Privacy Professionals (IAPP).