Lana T. Yang Email Address

Senior Counsel and Manager, Legal Resources

Mitsubishi Corporation is Japan's largest trading company and a member of the Mitsubishi keiretsu.

After 11 years as a generalist in the legal division of Mitsubishi (a multinational trading company) handling corporate transactions, managing litigations, and building compliance programs, Lana spent the last 7 years developing information governance, data security, and privacy programs. Lana revamped the company’s document retention policy through close collaborations with business and corporate units, producing the company’s first data map in this process and providing her with a detailed understanding of the company’s IT infrastructure, which allowed her to implement litigation holds more effectively and to work seamlessly with HR and IT to institute appropriate annual technical and manual processes for data retention compliance as well as address data security and privacy compliance. Afterwards, Lana spent 18 months in intensive partnership with IT to finalize the company’s first data security incident response plan. Lana led a cross-functional team in obtaining management approval for and completing the company’s first formal security risk assessments, tabletop exercise, and vendor risk assessments. She created the company’s first live cybersecurity awareness training, which has become the most popular training provided by the legal and compliance division. As a result of Lana’s efforts in building the company’s data security program, the company’s security incident response team has become a resource for Mitsubishi’s other affiliates in the Americas requiring cybersecurity support with incident response, awareness training, or templates such as incident response plans and vendor risk assessment questionnaires. Lana also acts as a liaison to her colleagues in Tokyo for cybersecurity initiatives and privacy law developments. Her current responsibilities include monitoring and developing compliance strategies in response to ever-changing U.S. privacy laws, regulations, and standards, as well as serving on Mitsubishi International Corporation's Paperless Initiative Task Force to transition recordkeeping and HR processes from legacy systems to cloud-based alternatives. Her International Association of Privacy Professionals certifications include CIPP/US, CIPP/E, CIPM, and CIPT.