Serious Privacy

Send us a text

On this week of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Crawford & Company dive deep into the topic of location data, which is considered sensitive personal data and is often not disclosed in many apps. We talk about geopositioning satellites, a journalist investigation into the Polar's fitness app, transparency reports on responses to government requests, such as this one by TMobile, and creative uses such as tracking saguaro cacti in Arizona and raising money for No Kid Hungry. (and a bonus on Beyonce's Texas Hold Em in honor of K’s session with Maggie Gloeckle and Ashley Slavik at IAPP Global Privacy Summit in DC and the LGBTQ party with Ron de Jesus themed on Alice in Wonderland... where K might just leverage a little cosplay on the Queen of Heart of Privacy.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Crawford & Company connect on some seriously sexy privacy topics - namely TCF with the recent decision against IAB and the European AI Act, including the exciting new Nymity AI Beta testing. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Crawford & Company host Alan Chapell of Chapell and Associates. Alan serves as outside counsel and chief privacy officer to digital media companies, and since 2003, has advised well over two hundred different companies. He has his own consultancy, his own newsletter, the Chapell Report, and is also making some funky music - on . Spotify. Join us as we dive into cookies, ads, google analytics, and more.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Dr. K Royal of Crawford & Company is joined by our featured guest-host Ralph O’Brien on location at the IAPP UK Intensive in London. 

Paul Breitbarth of Catawiki is traveling. Ralph and K were able to catch up with some amazing privacy all-stars starting with Robert Bateman, quickly followed by Marie Penot, Joe Jones, John Bowman of IBM now, Liz Smith of DPOrganizer, and Kate Colleary. Join us for a lively discussion with some pretty amazing people - hear what they consider the hottest new privacy development, what they took away from IAPP, and then - just general privacy conversation featuring #DPIAs, #AI, #consent, and more.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Crawford & Company catch up on a week of privacy news, ranging from the legislative debate on Coppa 2.0, the EDPB Opinion limiting the impact of the One Stop Shop, the Lockbit take down by the FBI and European police authorities, the preparations for the Olympic Games in Paris and the Right to be Forgotten. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Crawford & Company connect with Rie Aleksandra Walle. The original grumpyGDPR podcaster, to discuss current events and the DPO Hub. Join us for a rousing great conversation about the EU, Irish DPC, the most challenging part of compliance for companies, and so much more…

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Crawford & Company examine profiling in all its contexts and glory. Join us for a lively conversation.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal connect with authors Dr. Valerie Lyons and Todd Fitzgerald.

At the end of last year, a new manual for chief privacy officers and data protection officers, and anyone with a similar job title or interest, was released: the Privacy Leader Compass. Following a similar manual for CISOs, this book provides all that privacy leaders need to know to develop and maintain their privacy or data protection program.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Crawford & Company kick off Season 5 with a Bang! As usual, we launch the new season on Data Privacy - Data Protection Day and what a year we’ve had so far!

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal and Ralph O’Brien bring you the final episode - chock full of privacy goodness: episode 183 of Serious Privacy. And what a year it has been.  With over 44,000 downloads just this season, this was our most successful year to date. We missed top 10% on #Buzzsprout by about 5 downloads a week - so share and care. But of course, the year was not remarkable because of the number of downloads, but because of all the things that happened. From new legislation in India, to the adoption of the data privacy thingy, from yet again failed negotiations on the European ePrivacy Regulation to still no new data protection laws in Canada and the UK, the world of privacy and data protection is keeping all of us busy. 
Top episodes are:

5. We’re back and already loving season 4

4.Data Transfers: Will we ever learn? with Laura Dreschler

3.This is the year that was - final episode of 2022

2. Mega Meta Privacy with Romain Robert and Gabriela Zanfir-Fortuna (#1 when we started recording…and it flipped)

1. AI: not so intelligent and not so artificial

Favorites include: 

Tackling the Tough Topics: CSAM (Dr. Teresa Quintel and Alexander Hanff); Learning on the Run: Lets go Apprenticing (Emma Godfree); Passionate Compassion - Data Protection in Guernsey (Emma Martins); Coulda woulda shoulda - a talk on Ethics; Live from Stockholm at NPA23!; If it's broken, fix it (UK breaches with Ralph O'Brien); and Vendor Management - it's a real thing, and The truth and nothing but the truth: Europol (with Daniel Drewer and Jan Ellerman).

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

You have been promised this episode for months, but finally at the end of the year, on this week of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal give you an overview of the U.S. State Law developments in 2023. What are the most important parts to understand State consumer privacy laws and how do you comply with them? Luckily, Paul and K don’t have to do this all by themselves, but they can rely upon the expertise of Joanne Furtsch, VP Privacy Knowledge at TrustArc. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal bring you a week in privacy, covering women in privacy like Liz Denham, Annelies Moens, Ludmila Morozova-Boss and others, OpenAI, Meta and noyb, holiday scams, new legislation, and even book reviews, Ready Player 1 and Your Face Belongs to Us from Kashmir Hill. Tune in for some fun.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal connect with Liz Denham, who was appointed to the Jersey Data Protection Authority and is also the new Chief Strategist at the Information Accountability Foundation. Liz has quite the extensive career in privacy leadership and discusses developments in the field with Paul. This one also features some information on some friends of K in a band who are touring Europe right now, Stone Senate. Also, remember, registration is open for next year’s Global Privacy Assembly in Jersey.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal bring you a different format, comprising separate updates along with Paul’s conversation with Amit Ghadia, a lawyer and a certified Global Data Protection Officer and trainer based in Nairobi with an office in Oxford, UK. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal connect with Tobias Judin, the Head of the International Section at the Norwegian DPA and Co-Chair of the International Enforcement Working Group of the Global Privacy Assembly. Tobias has a background in law and informatics, which lends itself well to the recent investigations and actions by the Norwegian DPA. On 27 October 2023, the European Data Protection Board made a big decision. The urgent request from the Norwegian DPA to enforce a processing ban for Meta’s personalised advertising practices was endorsed. 
Some resources mentioned:

• Leaked FB memo about Cambridge Analytica
• Paul’s post on Linkedin with photos of consent 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

Paul Breitbarth of Catawiki and Dr. K Royal connect with Woodrow Hartzog, Professor of Law at the Boston University School of Law. He also has some other academic roles, including at Washington University, Harvard and Stanford. His research focuses on privacy, media, and technology. Recently, professor Hartzog testified before the Judiciary Committee of the U.S. Senate in a hearing on Oversight and Legislation on Artificial Intelligence. 

Last summer, Serious Privacy released an episode on Artificial Intelligence in the wake of the European Parliament’s adoption of the EU AI Act. And although negotiations in Europe are still ongoing, it seems agreement on this new law is close. In recent weeks, the White House has released a blueprint for an AI Bill of Rights, as well as an Executive Order on Safe, Secure, and Trustworthy Artificial Intelligence. And on the day we record this episode, 1 November 2023, the UK Government hosted an AI Safety Summit at Bletchley Park. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal catch up on the data protection news from the past month, ranging from the annual Global Privacy Assembly, an ICO investigation into Snap and CSAM to digital ID cards, and much more.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

Paul Breitbarth and Dr. K Royal bring you part III of the Nordic Privacy Arena. Odia Kagan is Partner and Chair of GDPR Compliance and International Privacy at Fox Rothschild LLP. You may very well know her from her LinkedIn posts, where she summarises data protection related news developments for a large audience, a little bit like we would do during a week in privacy episode. Odia is certainly not shy to give her opinion, as you will also hear in this episode.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

The episode we released earlier this week missed a segment, that somehow disappeared in the final edit. The full episode is online now, but in case you have already listened, we also offer you the Allan Frank interview as a separate download. Enjoy the listen!

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On 26 and 27 September 2023, Paul Breitbarth of Catawiki and Dr. K Royal attended for their first live podcast recording. But of course that was not the only recording they made during the Nordic Privacy Arena 2023. During the breaks and after the conference, K and Paul also interviewed some people, and those interviews you hear today. First up is Allan Frank, IT security specialist at the Danish Data Protection Agency, who talks about the Google Chromebook investigation. Next is Nils Ingdahl, the DPO for the Church of Norway. After that, you’ll hear a recorded segment from Grumpy GDPR podcast colleague Rie Walle with her review of the conference, and we wrap up with Caroline Olstedt Carlström, the Chair of the Swedish Data Protection Forum. 

• Dataministeriet Podcast
• Grumpy GDPR Podcast
• Swedish Data Protection Forum

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On 26 September 2023, Paul Breitbarth of Catawiki and Dr. K Royal recorded the first ever Serious Privacy Live, during the Nordic Privacy Arena in Stockholm, Sweden. In the past eight years, the NPA, organised by the Swedish Data Protection Forum, has become a staple on the European conference calendar. The podcast was the opening of the second conference day, with the request to look back on what was discussed during the first day, and look ahead at day two. This episode is the recording of the live podcast, and will discuss the position of the Nordic data protection authorities (Denmark, Sweden, Finland, Norway and Iceland), the development and regulation of Artificial Intelligence, and the forthcoming evaluation of the GDPR.

Next week, you'll hear another episode from the NPA with interviews we did during the conference breaks. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal talk about children's data, following the recent decision of the Irish Data Protection Commission in the TikTok case. Apart from a fine of 345 million Euro, the authority also ordered TikTok to change some of their policies, especially where children are concerned. Reason enough for us to dive a little deeper into children's data, age appropriate design, and what consent for children and their parents should look like.

• Age Appropriate Consent Code UK
• Age Appropriate Consent Code California

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal discuss privacy class action lawsuits featuring articles and information from Law.com with Richard Sheinis of Hall Booth Smith and Lisa Jaffee of Hiscox Insurance on Law.com about the class action “kill chain,” and one from Miller Nash by Brian Esler and Eva Novik on the new wave of class action lawsuits, featuring the Video Privacy Protection Act - and of course, mentioning our friends Ian Ballon of Greenberg Traurig and Constantine Karboliotis. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal discuss a lot of events in a long week of privacy as they lead up to attending the Nordic Privacy Arena, including The Norwegian Data Protection Authority ordering Meta to stop personalized advertising, Fairplay and the Center for Digital Democracy (calling for investigation related to Google ads and COPPA), Gatekeepers, China, S. Korea, SmartCars, Mozilla’s study on connected cars, OpenAI’s enterprise offering, and more.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal discuss the newly passed Digital Personal Data Act in India with Malavika Raghavan, PhD candidate in Information Systems and Innovation at the London School of Economics and Senior Fellow for India at the Future of Privacy Forum. Malavika is a lawyer with a background in policy-focused research, studying the impacts of digitisation on low-income individuals in India. In the past, she also worked several years for the global law firm Allen & Overy.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal connect with Ralph O’Brien (together in a long time) to discuss some of the data breaches happening in the UK, such as a breach of the electoral records and police officers in Northern Ireland, historical breach statistics, and more.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal share a healthy serving of privacy popcorn featuring India’s new law, Georgia's new law, Meta news, Argentina and Kenya and Worldcoin, China, NIST Cybersecurity Framework call for comments, and more, including California's adequacy decision from the Dubai International Financial Center.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, powered by TrustArc, Paul Breitbarth of Catawiki and Dr. K Royal sum up recent developments in privacy, including Meta's intent to change its legal basis and offer Europeans a choice, a notable breach in the United Kingdom involving a former politician Nigel Farage and a CEO resigning due to a breach, a TikTok decision about its practices with minors, new U.S. state privacy law, and the

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal tackle a topic that much trigger strong reactions, Child Sexual Abuse Materials or CSAM. Our guests today have worked a lot on this topic. Dr Teresa Quintel is attached to Maastricht University and mainly works on issues related to data protection in the law enforcement sector. Alexander Hanff is a long-time privacy activist. Both were participants in a panel discussion on the same topic during this year’s CPDP Conference in Brussels, and during today’s episode, you will learn why.

Links: 

●      https://ec.europa.eu/commission/presscorner/detail/en/IP_22_2976 

●      https://techcrunch.com/2022/05/11/eu-csam-detection-plan/?guccounter=1

●      https://9to5mac.com/guides/csam/

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal connect with Tom Kemp, a Silicon Valley based author, entrepreneur, investor, and policy advisor. He founded a cybersecurity cloud provider and was one of the drivers behind the campaign to adopt the CPRA in California. And now he has written a book containing big tech that is out later this summer.

Whether we look at the whole range of new legal requirements, from the European Digital Services and Market Acts, to the US state privacy laws, to regulatory enforcement decisions and discussions about breaking up some of the very large online platforms, big tech is under fire.

And our guest today has a view on these issues and is not shy to share it. We discuss the overcollection and weaponization of our most sensitive data, problematic ways Big Tech uses AI to process and act upon our data, and also the stifling of competition and entrepreneurship due to Big Tech's dominant market positions. He also discusses some practical matters such as how to block trackers on your personal devices along with a history of the CPRA.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal connect with Gabriela Zanfir-Fortuna, vice president for Global Privacy at the Future of Privacy Forum, and Romain Robert, Program Director and lawyer at NOYB to discuss the new landmark decision of the Court of Justice of the European Union: Meta v Bundeskartellamt, where the Court not only decided that competition authorities can use data protection when deciding on the potential abuse of a dominant market position, but also made some important calls on online advertising. Plus, Paul adds in some breaking news. 

Should you have any questions or suggestions, please reach out to us via [email protected] or [email protected], or via Twitter at @podcastprivacy. You find us on LinkedIn as well - just look for Serious Privacy. K is on Twitter and threads as @heartofprivacy and Paul as @EuroPaulB.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy,Paul Breitbarth of Catawiki and  Dr. K Royal catch up on a busy 48 hours in the world of privacy and data protection. Their conversation goes from a new landmark decision by the Court of Justice of the European Union to updates on the Thingy to new FTC nominations to a proposed EU law on the cooperation between data protection authorities. They also touch on China, Nigeria, India, Ireland, Argentina, and in the U.S. ... Delaware. Whew.

Links:

• Meta v Bundeskartellamt
• Draft EU law on DPA cooperation
• The ICCL comments on the draft EU law
• The EU-U.S. Data Privacy Framework (as adopted)
• The Irish gag order for data protection investigations
• UK-US Data Bridge
• FTC Nominations
• France TikTok Law
• 50 Years of FIPPs

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and  Dr. K Royal take you on a fast-paced global tour for privacy developments, including Oregon sending a privacy bill to the governor, Texas passing a privacy law, Connecticut enhancing its privacy law, Apple’s announcement on Child Sexual Abuse Material,  the parliamentary monsoon session in India, and two items out of the Swedish DPA - a fine on Spotify and Bonnier News. Also, we briefly touch on the 10th anniversary of the Snowden leaks. 

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Please do like and write comments on your favorite podcast app so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

While Dr. K Royal is traveling, Paul Breitbarth of Catawiki turns our attention to the Middle East for this episode of Serious Privacy. He speaks with Lori Baker, the Vice President Legal & Director of Data Protection for the DIFC Commissioner’s Office. The DIFC - the Dubai International Financial Center - has a special status in the United Arab Emirates and therefore also their own data protection law, going back to 2004. Paul and Lori talk about data protection in the Emirates, how the legislation compares to other laws we know such as the GDPR, and international data flows to and from the DIFC.

Resources:

• The website of the DIFC and the overview of adequacy decisions
• The books discussed:
  • What We May Become by Teresa Messineo
  • The Fire by Night by Teresa Messineo
  • The Second Sleep by Robert Harris 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and  Dr. K Royal discuss all things #AI - or at least all the basics, in light of the EU Parliament passing the #AIAct last week. In addition, the US has active measures evaluating AI (such as appointing VP Kamala Harris as AI Czar, US National AI initiative), the #OECD efforts, and various uses of AI, e.g., Lethal Autonomous Weapons Systems (#LAWS), facial recognition technology, #chatGPT, and# non-consensual pornography fakes. We also discuss some of the #ethics of AI along with some of the #AIscarymoments.

• The story of Clever Hans on Wikipedia, which was discussed in the book Atlas of AI by Kate Crawford.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Dr. K Royal connects with R. Jason Cronk, infamous privacy professional extraordinaire. Topics include a brief weekly update on privacy events, The Rise of Privacy Tech (TROPT) and its summit, led by Lourdes Turrecha, privacy frameworks, such as NIST privacy and 800-53, ISO27001, appendix A, ISO 27701, his new podcast with the BBB, privacy abbreviated with Donna Fraser, his book with IAPP strategic Privacy by Design, his non-profit the Institute of Operational Privacy Design, and much more. In fact, no surprise, our friend Ralph O’Brien’s name came up in conversation as well as Deirdre Mulligan, new Deputy Chief Technology Officer for policy for the United States and privacy engineering a la Michelle Dennedy. We also touched on the Privacy Law Scholars conference along with one of our favorite young law scholars, Wayne Unger. In addition, Jason covers many of his activities, such as speaking at CERN. 

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy  and email [email protected]. Please do like and write comments on your favorite podcast app so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy,Paul Breitbarth of Catawiki and Dr. K Royal of Crawford and Company tackle the tough topic of vendor management.

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy  and email [email protected]. Please do like and write comments on your favorite podcast app so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Dr. K Royal joins with co-host Ralph O’Brien, while Paul Brietbarth of Catawiki is off conferencing, to discuss recent developments in privacy. Tune in to catch us discuss the Meta penalty from the Irish Data Protection Commission, the IAB Trust and Consent Framework 2.0 (in its continuing saga with the Belgian DPA), and concepts of controller and processor. Some resources we discuss are the Meta news release, noyb’s news release on Meta’s penalty.

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @IGRObrien and email [email protected]. Please do like and write comments on your favorite podcast app so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

It's travel time again, so Paul Breitbarth of Catawiki and Dr. K Royal just chat among themselves about some developments in the world of privacy and data protection. They look ahead at the Meta fine that was supposed to be coming shortly (and has now been announced: $1.2 billion in fines and a serious compliance order - more here), you'll get an update on the U.S. state law developments and some AI developments including a vote on the EU AI Act, and Paul goes on a rant on DPA transparency... 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of #Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal turn their attention to #Mexico and the wider Latin American data protection developments. Their guest is Dr. Jonathan Mendoza, the Secretary of Personal Data Protection at the National Institute of Transparency, Access to Information, and Personal Data Protection. 

#INAI is the federal data protection authority in Mexico, and one of the few data protection authorities to host the Global Privacy Assembly twice. Jonathan specializes in disruptive technologies and digital ethics and has worked on industry standards, governance guidance, and collaborations with the private and public sectors regarding privacy and data management. 

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Please do like and write comments on your favorite podcast app so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal have an opportunity to catch up on a week on privacy. 

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Please do like and write comments on your favorite podcast app so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a Text Message.

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal connect with Mike Hintze of Hintze Law to discuss the newly enacted Washington My Health, My Data law. Passed by both houses quickly, but not unanimously, this new law has taken the US privacy law world by storm. Join us to discover the strengths and concerns around this act - and what your business may need to know. 

Mike has also a series of blog posts covering this topic: catch them all starting with the first blog post. Also, the unexpected question may force us to change our security questions! Phishing anyone?

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal celebrate the 150th episode of Serious Privacy. 

To celebrate this milestone, we have invited a special guest to join us this week: Wojciech Wiewiorowski, the European Data Protection Supervisor. Before that, Wojciech was the chair of the Polish DPA. He has a long background working on privacy, data protection and electronic governance issues, working both in the public sector and academia, at Gdánsk University.

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Please do like and write comments on your favorite podcast app so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Crawford & Company connected with two key individuals at Europol:  Daniel Drewer who is the head of Europol's data protection office and Jan Ellerman, one of the senior experts. Europol isn’t quite the way it is portrayed in the movies, so tune in for the real story.

You can probably imagine the amount of personal data that is needed to make all the crime analysis. Because of that, Europol for a long time already claims to have one of the most robust data protection frameworks in the world of law enforcement. Our guests today are responsible for that framework. Daniel and Jan talk about what it means to protect personal data in a law enforcement context, when every piece of personal data could be the missing piece of the puzzle.

More information on the Eden conference later this year, is available here.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Crawford & Company capture key moments of the International Association of Privacy Professionals (IAPP) Global Privacy Summit #GPS23.  We chatted with privacy friends and those who shared breakfast or lunch with us - an audience participation table! Join us as we connect with Kelli Lu, Maggie Gloeckle, Jon Bourke, Lily Russell, Eduardo Ustaren, ShanShan Pa, Isabel Hahn, Gamelah Palagonia, and others! 

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast app so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

At the end of March, Dr. K Royal started her new role with Crawford & Company, and because of that, was traveling to the company's headquarters in Atlanta (GA). That same week, Paul Breitbarth of Catawiki was teaching a new data protection course with our favourite guest co-host Ralph O'Brien at Maastricht University's European Centre on Privacy and Cybersecurity: a Masterclass on privacy management and data governance. 

Therefore, this week, a discussion on the ins and outs of privacy management, ISO certifications and how to work towards compliance. If you would like to know more about the Masterclass, check out the website linked above. New dates for the course will be announced in the coming weeks.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Crawford & Company talk with dr. Laura Drechsler, Research Fellow at the Centre for IT and IP Law (CITIP) at the Catholic University of Louvain, Belgium. They discuss Laura's work on cross-border data transfers, comparing the decisions of the European courts and the guidance of the data protection authorities with the adequacy decisions that have been published by the European Commission. It is clear there is still a lot to learn from the past on how to do adequacy and other data transfers right.

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast app so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool tackle the tough topics of Ethics in data protection and privacy. This week's episode may be a little bit more philosophical than our usual ones. No big updates on what's happening in the world of privacy, but instead of conversation about ethics, what does it mean to take an ethical approach to data processing? And how does it work on a daily basis? 

This includes a perspective by Bojana Bellamy the President of Hunton Andrews Kurth LLP’s Centre for Information Policy Leadership  (CIPL) published with the IAPP. The article is International data transfers: Time to rethink binding corporate rules. 

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast app so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool bring you a recap of a very busy week in privacy. Earlier this week, we released a special episode on the UK data protection and digital information bill. But today you get the episode we actually intended for you this week, a regular weekend privacy episode, including information on the #Thingy, cookie banners, BCRs, and more.
Resources discussed: 

• IAPP state privacy law tracking
• Husch Blackwell state privacy law tracker
• Texas federal decision abortion funds
• Texas lawsuit by five women being denied abortions
• Texas bill on preventing abortion sites (and the actual bill)

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast app so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On 8 March 2023, the UK Government introduced the long awaited update for the UK GDPR, now called the Data Protection and Digital Information Bill, in the House of Commons. According to the press release, British business will be able to save many billions of pounds when this bill becomes law, but not everybody agrees that is true.

In this extra episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool talk with Ralph O'Brien, our go-to UK expert and guest co-host, on what the bill entails, and we also hear from Claire Archibald on some of the consequences of the bill. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool have an opportunity to catch up with Emma Martins, the Data Protection Commissioner of Guernsey. Until 2018, Emma Martins served as the Information Commissioner for all Channel Islands, which also include Jersey and smaller islands like Sark and Alderney. With the entry into force of GDPR, both bailiwicks however also adopted their own new laws, each with their own supervisory authority.

Resources:

• Website of the Guernsey DPA
• Project Bijou, sharing ethical data use best practices
• The Feel Good Guide to Data Protection

Join us as we discuss data protection challenges and successes in Guernsey along with her strategy and approach.

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast app so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool chat with Amy Worley, the Managing Director & Associate General Counsel at BRG on topics such as the enforcement letters sent out by the California Attorney General’s office on the do not sell / share my data requirement of the CCPA (as amended by the CPRA). We also discuss key US Supreme Court hearings in Twitter, Inc. v. Taamneh and Gonzalez v. Google LLC, involving Section 230(c)(1) of the Communications Decency Act. Join us to hear some wonderful open conversation on these critical events.

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast app so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool discuss some of the hottest privacy news - spanning the Op-Ed in the Wall Street Journal by FTC Commissioner Christine Wilson (R) who has indicated her intention to resign to the Netherlands’ outlawing social media posts to the mounting opposition to the EU-US Data Protection Framework (the Thingy”). Paul put it very well in this IAPP article "With the EPDB's opinion on the framework weeks away, I think the Parliament's resolution is very timely, and might also influence the (data protection authorities') debate on whether or not the framework is indeed essentially equivalent." Maastricht University European Centre on Privacy and Cybersecurity Senior Visiting Fellow Paul Breitbarth said. "I have no doubt it is a big step in the right direction, but I'm not convinced it is enough." We also touched lightly on an order against Meta and their law firm related to the Cambridge Analytica

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool meet with Emma Godfree part of the Data Protection & Information Governance apprenticeship program (recall Episode 26 of Season 3 with Barry Moult and Ralph O’Brien). She has been working as a data protection consultancy for 2.5 years, currently with iStorm. She also makes the amazing Lego clips explaining data protection basics, that you may have seen on LinkedIn. Let’s talk about what she has learned, and what experiences she can share, in today’s episode.

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @TrustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this season 4, second episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool meet with Carey Lening with Castlebridge, a Dublin-based data consultancy, as an outside DPO (privacat). She has over 20 years of experience assessing risks and enabling data security and data protection for companies like Facebook, Palantir, and numerous Fortune 500 companies. She recently gave a talk at the Rise of Privacy Tech event, titled “Is the Fediverse Ready to Think about Privacy?” And we are here to find out… 

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In the first episode of season 4 of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool welcome season 4 launching on Data Protection / Privacy Day 2023! From current events, to laws, to breaches, to SCCs - we probably covered it all! Paul even challenged ChatGPT to describe our season 1.

The Serious Privacy podcast, by TrustArc, season 1 covered a variety of core topics related to privacy and data protection. Some of the key topics discussed in season 1 include:

• Overview of key privacy regulations such as GDPR and CCPA
• The role of Artificial Intelligence in privacy and data protection
• Best practices for creating and implementing a data privacy program
• Impact of privacy on different industries such as healthcare and finance
• The future of privacy and data protection and how it will shape our world
• Real-world examples of data breaches and how to respond to them
• How to handle sensitive data and protect against cyber threats
• Current trends in data privacy and the challenges of protecting personal information in the digital age

Overall, season 1 of the Serious Privacy podcast aimed to provide listeners with a comprehensive understanding of the current state of data privacy and the challenges that organizations face in protecting personal information in the digital age. It also provided practical tips and best practices for organizations to create and implement a data privacy program to protect sensitive data and comply with regulations.

Should you have any questions or suggestions, please reach out to us via [email protected] or [email protected], or via Twitter at @podcastprivacy. You find us on LinkedIn as well - just look for Serious Privacy. You will find K on Twitter as @heartofprivacy and myself as @EuroPaulB.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On the final day of 2022, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool, look back at the year 2022 - a year where a lot has happened. In the season three finale of Serious Privacy, they discuss some of the highlights of past episodes. 

In 2022, Paul and K made 45 Serious Privacy episodes, this one included, bringing our total to 139. They have had 25 guests, 4 conference reports, five episodes with Ralph O'Brien as co-host and one crossover episode with the Data Diva and Privacy Please podcasts. And all this content was good for almost 43,000 downloads since the start of 2022. Thank you to all of our listeners and guests - we love what we do and we love even more that you love it too.

Resources:

• Episode S03E03 on the IAB TCF decision
• Episode S03E05 on DPIAs
• Episode S03E09 celebrating 100 episodes
• Episode S03E11 on data protection in Africa
• Episode S03E22 on backups and data retention
• Episode S03E28 - the cross-over episode
• Episode S03E30 on all things C
• Episode S03E32 on Sam Elliott

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On 13 December 2022, the European Commission published the long-awaited draft adequacy decision for the EU-U.S. Data Privacy Framework, among podcast listeners also known as the Thingy. In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool talk about the adequacy decision, and what they consider is missing from it. 

Resources:

• Draft Adequacy Decision
• IAPP Privacy Shield - DPF comparison
• ODNI Redress Process
• Executive Order 14086
• OECD Policy Framework on Digital Security 

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool talk about health data and medical research. Paul recently attended the 10th Summit of MyData-Trust, a Belgium-based consultancy company, where he interviewed a number of people, including on the European Health Data Space. K, as a former nurse, adds her views to the conversation. 

Speakers:

• Mark Jones (UCB)
• Mathilde Faure (My Data Trust)
• Roxana Albu (EORTC)
• Filip Karan (European Public Health Alliance)

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool have a rousing good time with Glyn Moody, author of the recent book Walled Culture: How Big Content Uses Technology and the Law to Lock Down Culture and Keep Creators Poor. Join us for a lively conversation about copyright and mass surveillance in pursuit of copyright enforcement.

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Dr. K Royal of Outschool connect with Dr. Gary Edwards, Co-founder and President of Golfdale Consulting to discuss fascinating privacy program metrics involving over 1400 respondents and more than 30 countries. The findings are pretty interesting. Paul Breitbarth of Catawiki is traveling currently and was not able to join us.

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki (turning 40 and this is our 40th episode this season) and Dr. K Royal of Outschool discuss recent events in privacy.

Join them as they touch on a recent data breach by Transunion in the US and mass public notice, passkeys vs. passwords (resource; FIDO open authentication standards), the first female president of Slovenia, Natasa Pirc Musar who is also a privacy professional (congrats!), PET - privacy enhancing technology -joint UK US competition, data localization, a controversial decision by the French Parliament on banning certain technolgies in schools, and Argentina’s data protection bill submitted to parliament (updated link to come).

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool change it up a little. Paul attended Privacy Space in the UK and took the opportunity to record short interviews with Richard Merrygold of iStorm, Claire Archibald with Education Data Hub (@edudatahub), Rowena Fielding (@MissIGGeek) at Miss IG Geek Ltd, and Tash Whitaker, an external DPO superhero - some of our favorite names in privacy / data protection.  

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Dr. K Royal of Outschool returns from vacation and catches up on the privacy activity with Paul Breitbarth of Catawiki. It seems like it was a quiet few weeks, but the more they talk, the more there is to catch up on.

Paul and K talk about the Microsoft Digital Defense Report, posted by a colleague Victoria Beckman with Microsoft, the EU Agency for Cybersecurity Threat Landscape Report (not reviewed yet),  the agreement between the data protection authorities of S. Korea and France for cooperation, the Twitter purchase and the move to Mastedon, the Digital Services Act publication, a controversial decision out of Denmark about companies not being able to retain marketing opt out lists, S. Korea vs. China vs. GDPR, and several other topics. 

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc @igrobrien @barbgs10 and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a Text Message.

While Dr. K Royal of Outschool is enjoying a well deserved vacation, Ralph O’Brien is joining Paul Breitbarth of Catawiki for a Serious Privacy conversation with Chris Docksey, the honorary Director General of the EDPS. Chris is also a member of the data protection authority in Guernsey and a visiting fellow at Maastricht University. 

During this episode, Ralph and Paul talk with Chris about the right to be forgotten, and the implications it has on local journalism. Chris has previously written about this for the German Verfassungsblog, raising concerns about the fair balance between privacy and press freedom in the online context and a possible chilling effect of self-censorship.

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc @igrobrien @barbgs10 and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier.

Resources:

• The judgment in the Costeja case
• Chris' article on Verfassungsblog
• Carole Cadwalladr's Ted Talk

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

While Dr. K Royal of Outschool is enjoying a well deserved vacation, Ralph O’Brien is joining Paul Breitbarth of Catawiki for a Serious Privacy conversation with Barb Lawler, the CEO of the Information Accountability Foundation and winner of the 2022 IAPP Vanguard Award for North America. Barb has a long career in privacy and was, among other things, the first Chief Privacy Officer at Hewlett Packard. She spend many years in the same role at Intuit. At the IAF, Barb is involved in the foundation’s contributions to the global legislative debate on privacy, as well as projects dealing with the future of responsible data use and data ethics.

During this episode, Ralph and Paul talk with Barb about her career, legislative developments in the U.S. and around the world and what the next decade will look like in terms of privacy and data protection. As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc @igrobrien @barbgs10 and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This week on Serious Privacy, Paul Breitbarth and K Royal speak with Yannick Vogel. Yannick was one of the finalists of the 6th EDPL Young Scholar Award 2022, as well as a PhD student hoping to obtain a Joint International Doctoral Degree in Law, Science and Technology. His paper, titled “Stretching the Limit, The Functioning of the GDPR’s Notion of Consent in the context of Data Intermediary Services” looks ahead at one of the new European laws that are entering into force shortly as part of the EU Digital Single Market: the Data Governance Act. This law should make it easier to share personal data, especially between the public and the private sector. What it all entails, and what consent has got to do with it, we’ll discuss with Yannick in this week’s episode.

Previous Young Scholar Award episodes:

• Pervasive Interference: A chat about Purpose Limitation (with Isabel Hahn)
• It’s Not All About You: DNA and Group Privacy (with Taner Kuru)
• You have the Right to Rights in Law Enforcement (with Katherine Quezada Tavárez)

As always, please feel free to share your thoughts with us - there will be a year end show on the best episodes. Get your vote counted! Follow us on LinkedIn as Serious Privacy and on Twitter @podcastprivacy @EuroPaulB and @HeartofPrivacy. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool discuss the 10-7 series of deliberately machinated and long-awaited political events surrounding the EU-US data transfer mechanism that is intended to replace the Privacy Shield, invalidated under Schrems II back in 2020 - the “thingie.” Plus, the UK-US joint statement on adequacy consideration. These various events comprise the Executive Order (the Fact sheet along with the information on the European Commission site), the Department of Commerce statement, the Department of Justice from the Office of the Attorney General on the Data Protection review Board final rule, and the NOYB’s response. As expected, and TrustArc predicted, those companies who remained in the Privacy Shield will have a transition plan. 

For additional information, please also see various analyses from the IAPP and the Future of Privacy Forum.  Carry the conversation further and connect with us to discuss.

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool are headed to South America to see what is happening in privacy. With one cohost based in the United States and the other in Europe, it is no surprise that the focus of the Serious Privacy conversations is often the transatlantic relationship. Of course, data protection goes beyond the European Union and the United States, many Latin American countries have had national data protection laws for quite a long time. 

So José Alejandro Bermúdez joined the show to share a wealth of knowledge on privacy laws, especially an update on Colombia. José was the inaugural data protection commissioner in Columbia and a longtime data protection advocate. José was a member of the governmental commission appointed to draft the Columbian data protection and its secondary regulations, and a member of the Colombian OECD accession mission for privacy in the digital economy. He is currently the LATAM advisor for the Centre for Information Policy Leadership - so he knows a thing or two about privacy in Latin America.

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast app so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool have a rare moment to share philosophies about privacy, with a touch on some current events. Hear what they have to say about new professionals moving in to privacy, what courses to take or skills to have, and how experienced professionals transition into privacy. It’s raw. It’s real (and it includes Sam Elliott).

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool catch up on a slow week in privacy. We do touch on some meaty topics that are usually overlooked, such as a CISO going into trial on personal liability for a data breach (or rather the non-disclosure of a data breach), the American Data Protection and Privacy Act’s (ADPPA’s) future, with the recent statement by Congresswoman Nancy Pelosi on her support or lack thereof, and the GDPR implementation review. Tune in and hear what these and other wildly exciting topics come up.

Register for TrustArc's upcoming webinar on rethinking how consumer data is managed on Sept. 20.

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool catch up on a week in privacy. This week is all about the C’s - COPPA, code, California, Cuba, Colombia, cars, consultations, and more. We talk about the new age appropriate design code bill that is before the CA governor for signature. It is expected to pass in spite of the opposition against it.

Cuba’s new law is covered, but we only touch on Colombia because we have an upcoming guest for that topic. The new CNIL enforcement against UBEEQO is wonderfully instructive in its findings, if not its recommendations. And also the Sephora settlement in California under the California Consumer Privacy Act, addressing the “sell” of data, service providers’ contracts, and notice. The slightly unexpected aspect centering on GPC, Global Privacy Control.

Join us for an enlightening and entertaining conversation, with a couple of bloopers for the listeners - someone suggested that we give y’all a treat with outtakes, so one day, we may put together a special episode (and it’s not just K who bloops). As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool connect with perhaps a controversial player in the privacy game, Gal Ringel, Founder and CEO of Mine. (on Twitter @MineApp and @GalRingel) You might recognize the name from a slew of individual rights requests. We agree that everyone should be able to understand what personal data organisations process about them. However, it can be a challenge to find out how to file these access requests for each and every company that may have your data - there could literally be thousands of companies to write to.

Gal is based in Tel Aviv, Israel, and has a background in military intelligence, software development and investment. He is also a member of the Forbes Technology Council. He saw a need and was inspired to help make it easy both for individuals and companies.  In recent years, there have been several initiatives launched to make it easier for individuals to exercise their rights. The Dutch civil rights group Bits of Freedom has for example launched a project called My Data Done Right, that allows you to create your access request letters. 

Join us for an enlightening and entertaining conversation with Gal and our mutual love of data protection rights. As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

What do you get when you put three privacy podcasts on together? A rocking great time! Two women, three men. Five personalities. fifteen opinions! "Dogs and cats living together, mass hysteria!"

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This episode of Serious Privacy, Dr. K Royal of Outschool and Paul Breitbarth of Catawiki, brought to you by TrustArc, connect after Paul’s vacation to catch up on what is happening in the privacy world.  And there are updates to be had! They discuss Turkey, India, and the US along with recent decisions, such as Criteo. Along the way, they touch on privacy notices, the “thingie,” (otherwise known as the replacement for the EU-US Privacy Shield) and some prviacy office operational challenges, such as privacy notices, budget, risk-based approaches, and age appropriate design code.

Join us as we discuss some boots on the ground work and hopes for the future.. As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This episode of Serious Privacy, co-host Ralph O’Brien joins Dr. K Royal of Outschool while Paul Breitbarth is on vacation for the last of his 3 weeks. This week, Dr. K and Ralph chat with Barry Moult, Director at BJM IG Privacy Ltd. Barry is well known in the data protection industry, especially in the UK, where he has been recognized for his tremendous work and efforts. His awards include: ICO Excellence in DP Award winner 2020, the NHS SIGN IG Professional of the Year Award 2021, named an IRMS Fellow, and recognized with the AMIRMS & Life Time Achievement 2020. 

Barry entered the privacy world as the Data Protection Act was passed and was a nurse at the time. We discuss how privacy grew and the IG apprenticeship program that just launched.

Join us as we discuss some boots on the ground work and hopes for the future.. As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc Ralph as @IGrobrien and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This episode of Serious Privacy, co-host Ralph O’Brien joins Dr. K Royal of Outschool while Paul Breitbarth is on vacation for 3 weeks. This week, Dr. K and Ralph discuss certifications and the role of the DPO. Specifically, Ralph is a trainer for IAPP certification exams and we have had quite a few questions on certification exams and credentials. 

Key links: IAPP certification exams in general

CIPP 

CIPM

CIPT

Fellow of Information Privacy

CDPO/BR and CDPO/FR

Join us as we discuss so much around certifications and on the job practicalities. As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This episode of Serious Privacy, co-host Ralph O’Brien joins Dr. K Royal of Outschool while Paul Breitbarth is on vacation for 3 weeks. This week, Dr. K and Ralph discuss current events in the United Kingdom, namely the prime minister elections and the proposed Data Protection and Digital Information bill. This bill seeks to “clarify” some aspects of data protection law in the UK, but seems to complicate it instead. Ralph explains all …

Join us as we discuss what you need to know and how to approach the proposal. As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool connect with Lauren Reid, a privacy and digital ethics consultant and president of The Privacy Pro in Toronto.  Listen as Paul and Dr. K connect on all things current in Canada, especially related to C27, the newest proposal to update PIPEDA  - following up from C11, which failed to pass in the previous election year.

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool have a robust conversation with W. Curtis Preston, (on Twitter as W. Curtis Preston), the Chief Technical Evangelist with Druva, Inc.. In this conversation, Mr. Backup himself, explains the difference between backups and archives, reminiscences about tape backups, and provides insight on how backups relate to privacy.

As part of this, they discuss guidance from several data protection authorities in Europe on backups (Danish, French, UK) (or at least an acknowledgement of the difficulties of backups) and the ever-beloved right to deletion. Join us to hear his personal experiences and recommendations related to ransomware, restoration, and more. Also, he has published four O’Reilly books, the latest one - Modern Data Protection- available for free as an ebook on Druva’s website.

Also, catch the next webinar from TrustArc on July 19 - Level Up Your Healthcare Privacy Program. Let them know you heard about it from us!

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool includes Eric Rind, CEO and founder of ImagineBC. Eric is a former HR consultant, turned tech entrepreneur. Who's trying to build a digital community to allow people to monetize their personal information. Every once in a while you hear a blockchain application that still spikes an interest  and today's guest has developed such an application. The use of blockchain in relation to online advertising to help people make some money in return for their data. Is this the future of online advertising? 

Join us to discover more about their mission and how they help people monetize their own data. Apparently, there is some success in Africa. Will this finally connect with commercial interests? Also catch the upcoming webinar from TrustArc on their recent survey results: 2022 Global Privacy Survey: A 360 Corporate View Into Key Privacy Developments.

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool we go back to China discussing the Personal Information Protection Law (PIPL). You will actually be listening to the audio of a recent webinar organised by TrustArc, which they hosted together with former colleague Yi Lu. 

PIPL applies to all organisations doing business in China or targeting people in China and has significant compliance consequences similar to GDPR. Five months after its implementation, PIPL is still a major concern for many organizations. What if there was a way to reduce your time to compliance with PIPL drastically by leveraging the privacy work you have already done?

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool meet to discuss some recent events in the privacy and data protection world, such as the proposed American Data Protection and Privacy Act, as the hearings, featuring comments presented from Caitriona Fitzgerald, Deputy Director of the Electronic Privacy Information Center (EPIC); David Brody, Managing Attorney, Digital Justice Initiative, Lawyers' Committee for Civil Rights Under Law; Bertram Lee, Senior Policy Counsel, Data Decision Making, and Artificial Intelligence, Future of Privacy Forum (FPF); Jolina Cuaresma, Senior Counsel, Privacy & Technology Policy

Common Sense Media; John Miller, Senior Vice President of Policy and General Counsel, Information Technology Industry Council; Graham Dufault, Senior Director for Public Policy, ACT | The App Association; Doug Kantor, General Counsel, National Association of Convenience Stores; and Maureen K. Ohlhausen, Co-Chair, 21st Century Privacy Coalition.

Tune in to hear about the ADPPA, as well as news about the European Data Protection Board plenary session, and a new bill that passed in MN on education technology & privacy for students. 

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast app so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool is a little different than the norm as the IAPP hosted its first Data Protection Intensive: Nederland 2022.  Although K could not attend, she and Paul discussed a couple of substantive questions he could ask to [unsuspecting] participants. And those interviewees were quite knowledgeable. 

They comprise Bart Voorn, Helen Graham, Jose Belo, Zach Foote, Monika Tomczak, Vanessa van Kuilenburg, and Wanne Pemmelaar.

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool connect with Paolo Balboni, who is attached to Maastricht University’s European Centre on Privacy and Cybersecurity as Professor of Privacy, Cybersecurity, and IT Contract Law. Last March, researchers at Maastricht University published the first-ever complete Corporate Social Responsibility framework for data protection, aimed at improving privacy and security for a sustainable digital future. The framework ​​translates theoretical ethical principles into tangible and practical guidelines for companies and organizations that process personal data. 

Next to his university role, Professor Balboni is one of the founders of ICT Legal Consulting, an Italo-Dutch law firm with offices around the world. He also has many other roles in privacy, including as the Chairman of the Data Protection Board of the European Patent Office.  

Join us as we discuss the framework, his career progression in privacy, and privacy as the fourth element in a successful ESG program. If you need help in justifying the work you do (or need to do), check out this research on ROI. As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easily. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, recorded on the anniversary of the GDPR (watch the recent webinar), Paul Breitbarth of Catawiki and Dr. K Royal of Outschool catch up on the past week or so in privacy.  What exciting things - or not so exciting things have happened. Most seem to be in the area of cross-border transfers. 

Join us as we discuss some history with the GDPR, with a light mention of Connecticut’s new privacy law, Quebec’s Bill 64, and People’s Republic of China’s PIPL (register for the upcoming webinar on PIPL compliance with Paul and Dr. K) We discuss whether the GDPR remains the gold standard of data protection laws, or one we want to inspire the others. We also discuss other related topics, such as the potential of the Global Cross Border Rules, based on the APECs Cross Border Privacy Rules, the EU-US thingy (the new agreement in principal, see recent webinar ), codes of conduct, and the Scope EU Cloud Code of Conduct specifically. For example, CloudFlare announced its adherence to the EU Cloud Code of COnduct and the rise in their stock. During this week, Paul missed the CPDP conference, including some of our friends - Emerald de Leeuw and Ralph O’Brien - along with the presentation by Professor Greenleaf on international data flows. 

We also covered the UK’s International Data Transfer Agreement, finalized back in March, and the new FAQs issued by the European Commission on Standard Contractual Clauses, which is similar to the ones Paul and K issued for TrustArc last year, with the exception of just a few tidbits that

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a Text Message.

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool take some time to review recent events in the privacy / data protection world. This week, this means they cover the Connecticut Act concerning Personal Data Privacy and Online Monitoring Act - the PDPOM… Paul has a cool name for it. Connecticut’s act passed on May 10, 2022 and takes effect July 1, 2023 - along with CPRA and Virginia on January 1, 2023; Colorado also on July 1, 2023; Utah on December 31, 2023  Please also see the recent state laws webinar from TrustArc and the state whitepapers.

This leads into the Roe v. Wade US Supreme Court leaked draft decision and then on to Europe with a study conducted  by the  Radboud University in the Netherlands, imec-COSIC, KU Leuven (a Catholic research university in the city of Leuven, Belgium), and University of Lausanne in Switzerland. These researchers looked at thousands of websites and their “leaky forms.” Leaky forms are those that capture data before the individual submits it, so companies get a lot of data that they should not have, including passwords. This may not be purposeful, but it is concerning. The full paper is published here.

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool take some time to review recent events in the privacy / data protection world. This week, this means they cover the Connecticut Act concerning Personal Data Privacy and Online Monitoring Act - the PDPOM… Paul has a cool name for it. Connecticut’s act passed on May 10, 2022 and takes effect July 1, 2023 - along with CPRA and Virginia on January 1, 2023; Colorado also on July 1, 2023; Utah on December 31, 2023  Please also see the recent state laws webinar from TrustArc and the state whitepapers.

This leads into the Roe v. Wade US Supreme Court leaked draft decision and then on to Europe with a study conducted  by the  Radboud University in the Netherlands, imec-COSIC, KU Leuven (a Catholic research university in the city of Leuven, Belgium), and University of Lausanne in Switzerland. These researchers looked at thousands of websites and their “leaky forms.” Leaky forms are those that capture data before the individual submits it, so companies get a lot of data that they should not have, including passwords. This may not be purposeful, but it is concerning. The full paper is published here.

As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email [email protected]. Please do like and write comments on your favorite podcast act so other professionals can find us easier. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth  and Dr. K Royal connect with Victoria Beckman, the lead over Microsoft Digital Crimes Unit for the Americas and an award-winning woman in cybersecurity. Victoria is a former law student of K’s at the Sandra Day O’Connor College of Law at Arizona State University and they both wound up in privacy-related fields. Of course, Victoria’s route to her current role was quite indirect, including a background in engineering.

We focus on a recent special report by Microsoft on the cyberwarfare being conducted in the Ukraine by Russia, aloing with Microsoft’s annual digital defense report, the last one issued in 2021. Join us as we discuss these hot topics, along with data protection basics, such as passwords (as also discussed by K and her husband Tim in episode 34 in season 2) and phishing attacks. 

As always, please feel free to reach out to us at [email protected] or on LinkedIn for Serious Privacy and TrustArc (as well as Paul and Dr. K). You can reach us on Twitter @TrustArc @PodcastPrivacy @EuroPaulB and @HeartofPrivacy. Please also rate and review us in your favorite podcast app and share us with your friends. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth introduces an episode where Dr. K Royal caught up with several individuals at the IAPP Global Privacy Summit held in Washington DC at the Marriott Marquis. It was a truly wonderful event, the first Global privacy Summit since 2019, with thousands of privacy professionals in attendance. Attendees included professionals from all over the world, those with nonprofits, with private companies, with start-up companies, government representatives, in-house and outside firm attorneys, security professionals, regulators, and more!

Join us to listen to snippets of conversation with some people you may know and some you may not. Featured in this episode are Trevor Hughes, CEO of the IAPP, Eduardo Ustaren of Hogan Lovells, David Cohen of IAB, Emil Ochotta with Google, Jörn Wittmann and Gabriela Mercuri with Scope Europe, and ShanShan Pa now with State Street. 

Although K Intended to include short snippets from some truly world class keynote speakers and some of the sessions that she attended, the sound quality just wasn't good enough to be able to add them. We're pretty sure the IAPP will include some recordings but if they don't - just know if you weren't there, you missed a really good conference.

As always, please do rate and review us in your favorite podcast app - and if you let us know, we will send you a sticker!

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This episode of Serious Privacy, sponsored by TrustArc, heads south to Africa. Paul Breitbarth of Catawiki and Dr. K Royal of Outschool chat with Teki Akuetteh, the first Executive Director of the Ghana Data Protection Authority and current Chair of the Africa Digital Rights Hub.  The conversation covered quite a bit of ground, starting with how privacy has developed in Africa, cybersecurity, and how enforcement has grown demonstrating the advance of privacy in Africa as a whole, although some nations are a little more ahead than others.

Topics touched on some countries, such as Ghana, South Africa, and Burkina Faso, alog with the awareness of data privacy in the public realm. Also, the role technology and telecoms in particular contribute to the need and the drive of data privacy. 

Join us as we discuss Teki's experience in the developing tech world in Africa, the challenges and successes she has seen, and how she got into the field to begin with. As always, you can catch Serious Privacy in your favorite podcast app or listen to it straight from your device. Please do let us know what you think about the topics and what you might want to hear. Rate and review us - that always helps! and connect with us on LinkedIn or Twitter. @EuroPaulB @HeartofPrivacy @TrustArc @PodcastPrivacy. Remember to check for upcoming webinars and ask about Privacy Central from TrustArc.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this episode of Serious Privacy, sponsored by TrustArc, Paul Breitbarth and K Royal some with Angelique Carson. Angelique is currently with TerraTrue but Paul and K know her best from when she was with the IAPP, International Association of Privacy Professionals.

Angelique had launched the IAPP's podcast years ago,  where K was one the very first guests.
The conversation flows from podcasts with its challenges and triumphs to how the privacy profession has grown over the past decade. They also discussed how professionals, whether attorneys or not,  can enter the hottest growing field.  The barriers to entry aren't insurmountable, but being successful does require a certain perspective. And if you are looking for the GDPR website K was referring to - you'll find it here.

Join us as we reminisce and review what it means to be in privacy,  the changes we've seen worldwide,  and our perspective on the state of this fascinating field.

In addition,  K and Angelique are attending the IAPP's Global Privacy Summit in DC April 11 - 13. This is the first GPS in three years and it's sure to make history.

As always, if you like the Serious Privacy podcast, tell everyone -rate and review us in your favorite podcast app. You will find us on LinkedIn and Twitter @podcastprivacy, along with TrustArc, K as @heartofprivacy and Paul as @EuroPaulB. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In the 100th episode of Serious Privacy, Paul Breitbarth and Dr. K Royal connect with two of the biggest names in the privacy field, Chris Babel, the CEO of TrustArc and Hilary Wandall, Chief Compliance Officer at Dun and Bradstreet. Both Chris and Hilary were instrumental in launching Serious Privacy and critical to its success.

In this completely unscripted and candid conversation, the four of them touch on both philisophical aspects of privacy and practical application. No topic was off limits! They ranged from the replacement to Privacy Shield to the growth of privacy as a career to ESG.
Join them for a rousing discussion - that goes a little longer than usual. And as a special treat, we also have an interview with Immaculate Kassait, the Data Commissioner of Kenya.
Feel free to comment on Twitter (@podcastprivacy @trustarc @euroPaulB @heartofprivacy) or on LinkedIn for Serious Privacy your thoughts in response.

Don't forget to catch K at IAPP Global Summit April 11 - 13 for stickers and spur-of-the-moment interviews and also register for upcoming TrustArc webinars.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool review what might seem to be small events in privacy developments, but are really robust once reviewed. They touch on a spotify case in Barcelona, the Spanish Data Protection Commissioner search on hold, and events in Belgium. In addition, on the US side, a DC judge ruled that Mark Zuckerberg could not be added to the Cambridge Analytica case personally.

At the same time, the Irish DPC entered the first Article 60 review and issued Facebook a $17M fine.  The DPC is also facing a lawsuit by the Irish Council for Civil Liberties. Meanwhile, the New York police department is facing a lawsuit for its massive DNA database that they have collected over the years. Lastly, the Zoom DPIA by Sjoera Nas (please see the prior podcast with her on DPIA processes).

Next week is our 100th episode. Tell us what you'd like to hear and thank you for being our friends!

As always, if you like the Serious Privacy podcast, tell everyone -rate and review us in your favorite podcast app. You will find us on LinkedIn and Twitter @podcastprivacy, along with TrustArc, K as @heartofprivacy and Paul as @EuroPaulB. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth and K Royal catch up with the renowned Kirk Nahra, co-chair of both the Big Data Practice and the Cybersecurity and Privacy Practice for WilmerHale.

K and Kirk have known each other for years - mostly related to US healthcare law, long before Kirk won the IAPP Vanguard Award in 2021. They discuss the US Health Insurance Portability and Accountabilit  Act of 1996, along with its subsequent amendments, known as HIPAA. But they also discuss information blocking and protecting COVID-19 data in this current global environment, and the reputation of US privacy laws.

Join us for a lively discussion of privacy, adult kids, and teaching privacy at US law schools. Kirk also talks about an insightful journal article he always references in his class. As always, if you like us - tell the world! You can find us on Twitter @podcastprivacy @trustarc @europaulb @heartofprivacy.  We're also on LinkedIn. We are coming up to our 100th episode, so let us know if you have any questions you'd like us to address.

Register for the TrustArc Webinar How to Prepare Your Business for Privacy Changes in the Middle East & North Africa on March 29 at 9 am PST.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

We live in strange times that often remind us how important it is to live our lives in freedom and to enjoy our fundamental rights. This week on Serious Privacy, Paul Breitbarth and K Royal talk about the war in Ukraine, but also about a lot of data protection related developments around the world. 

Topics include the new privacy law that is awaiting the Governor’s signature in Utah, proposed changes to the Budapest Convention on Cybercrime and the response of the European Data Protection Board to it, new guidance on using codes of conduct to transfer personal data out of Europe, getting started in a new data protection role and more. 

As always, please feel free to share your thoughts with us. Follow us on LinkedIn as Serious Privacy and on Twitter @podcastprivacy @EuroPaulB and @HeartofPrivacy. 

Resources

• The Utah Consumer Privacy Act
• The Council of Europe Budapest Convention on Cybercrime
• Second additional protocol to the Budapest Convention
• EDPB response to the Second additional protocol
• EDPB guidelines on codes of conduct to transfer personal data

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This week on Serious Privacy, Paul Breitbarth and K Royal speak with Sjoera Nas. Sjoera is a long time privacy professional and privacy activist. She became involved with digital rights in the late 1990s and early 2000s, while working for the Dutch internet service provider XS4all, and later for civil rights group Bits of Freedom. But Sjoera is probably best known for her work at the Dutch Data Protection Authority, where she took the lead within the so-called Internet Team, leading investigations into anything that was happening online, from cookies and trackers, to interactive television, search engines, and picking long fights with ICANN on their WhoIs register and telco’s on data retention. 

Since four years, Sjoera is a consultant for Privacy Company, still based out of the Netherlands, but doing work with global impact. Together with her team, she writes extensive data protection impact assessments on a range of cloud services, like Office365, Google Workspace and Microsoft Sharepoint and OneDrive. Her customer: the Dutch government and higher education system, which surely helps when it comes to negotiating risk mitigation measures. 

During this episode, we talk at length about conducting technical deep dive DPIAs, that everyone can benefit from, and negotiating risk mitigating measures with Big Tech. But we also cover international transfers (remember those?) and Google Analytics alternatives.

As always, please feel free to share your thoughts with us - therewill be a year end show on the best episodes. Get your vote counted! Follow us on LinkedIn as Serious Privacy and on Twitter @podcastprivacy @EuroPaulB and @HeartofPrivacy. 

Resources

The blog posts linked below contain the summaries of each of the DPIAs referred to during the podcast. Via the blog, you will also find the full DPIA document, including annexes, to read. Even though they are lengthy, we highly recommend reading and using them if your company uses any of these products.

• The Privacy Company blog 
• Blog post about the DPIA for Microsoft Sharepoint, OneDrive and Teams
• Blog post about the DPIA for Google Workspace
• Blog post about the DPIA for Office365
• Blog post about Google Analytics alternatives (in Dutch only)
• SLM Rijk (the Shared Service Center for the Dutch Government) DPIA Overview 
• The NoGA project (No Google

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this week of Serious Privacy brought to you by TrustArc, Paul Breitbarth  and K Royal share some news, discuss current events, and review both recent privacy developments and upcoming guests for the show. Topics covered include decisions involving tech companies, such as Facebook, Google, and Grindr, as well as general information on assessing risks. 

Join us as we discuss privacy from our perspective in the midst of a war in Europe. Our hearts and prayers go out to those impacted, most especially the people of Ukraine. 

Please also register for the upcoming TrustArc webinars, the next one on March 8 on COVID-19, Two Years Later – Still A Data Privacy Challenge. Click to register here.  Also, if you are wondering if tracking privacy efforts using spreadsheets is sufficient, check out this blog. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this week of Serious Privacy by TrustArc, K Royal and Paul Breitbarth have a conversation with Anne-Charlotte Recker and Julian Deckers of the Belgian Data Protection Authority. Both work for the DPAs Litigation Chamber, which on 2 February 2022 released their long-awaited decision on the legality of the Transparency and Consent Framework (TCF) developed by the Interactive Advertising Bureau (IAB). The decision will likely have a significant impact on the future of cookie banners. Not only did the Belgian DPA find that the current banners following the TCF model are not transparent enough, they also use legal bases for many data collections that are not possible.

Join us as Anne-Charlotte and Julian explain all about the background of the procedure, the decision that was made and what to expect next. They also explain the concept of Real-Time Bidding that is used in online advertising (the PhD Thesis of dr. Rob van Eijk on this topic can be found here). Since our recording, the Dutch DPA has indicated to various media outlets that the use of the IAB TCF in the Netherlands should be ended effective immediately, thus going a step further than the Belgian DPA. 

Thank you for listening to another episode of Serious Privacy. If you like our series, please do tell your friends and colleagues about us, and rate and review our episodes in your favourite podcast app or on your favourite podcast platform. 

Should you have any questions or suggestions, please reach out to us via [email protected] or [email protected], or via Twitter at @podcastprivacy. You find us on LinkedIn as Serious Privacy. You will find On Twitter, look for @TrustArc, @heartofprivacy, and @EuroPaulB.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this week of Serious Privacy by TrustArc, K Royal and Paul Breitbarth catch up with one of the oldest and most respected names in privacy, Marty Abrams, the Executive Director and Chief Strategist of the Information Accountability Foundation. Marty has 35 years of experience as an information and consumer policy innovator. Multi-stakeholder collaboration has been a key for him in developing practical solutions to dilemmas in information policy. The IAF has among other things prepared reports on Trustworthy People Beneficial Data Activities and on Fair and Ethical Data Processing, as well as drafted model privacy legislation for countries, including the United States, around the world. 

Join us as we discuss the United Kingdom and their recent activities in law, AI, such as training data for machine learning, and legitimate interest for advertising data. The IAF responded to the call for consultation. Marty also shared his thoughts on whether the GDPR, as it currently stands, can last 20 years. Other topics include cross-border transfers of data, government transparency, and model legislation.

Thank you for listening to another episode of Serious Privacy. If you like our series, please do tell your friends and colleagues about us, and rate and review our episodes in your favorite podcast app or on your favourite podcast platform. 

Should you have any questions or suggestions, please reach out to us via [email protected] or [email protected], or via Twitter at @podcastprivacy. You find us on LinkedIn as Serious Privacy. You will find On Twitter, look for @TrustArc, @heartofprivacy, and @EuroPaulB.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On 28 January 1981, the Council of Europe opened up the Convention 108, the world’s first globally binding instrument on the protection of personal data.  Since 2007, the privacy community celebrates International Data Protection Day (Data Privacy Day). For  #SeriousPrivacy, it is our season launch. 

K Royal and Paul Breitbarth talk about many of the recent developments in data protection and we play a new game: Privia Pursuit. Let us know if you think it has potential. Join them for a broad discussion that involves  TrustArc’s Webinar on India, Saudi Arabia data protection legislation, China’s PIPL, Quebec Bill 64 ( Serious Privacy episode with Constantine Karbaliotis and Jennifer Stoddart), US state laws (please see TrustArc’s paper on US State legislation), and Google analytics (see Dutch DPA’s Google Analytics guidance (in Dutch), Austria DPA’s Google Analytics decision,  EDPS Google Analytics decision,  Guernsey DPA, and Danish DPA). We also touch on the Dutch class action that was thrown out, and the cyber attack on the ICRC.

It’s not all work - we also include the Mauritshuis museum in The Hague, Disney’s Encanto, and Paul’s paper on

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This week on Serious Privacy, Paul Breitbarth and K Royal say goodbye to season 2 of Serious Privacy and look forward to season 3. 2021 might be a year that many of us actually would like to forget but for the privacy community, it was an exciting year and a lot of good things have happened. We have new laws, new guidance, more enforcement and court decisions, and a continuously expanding field of privacy professionals. The podcast continued to grow - this is the 91st episode and well over 50,000 downloads to date - and received wide recognition, including from the master of the privacy podcast directory Jeff Jockisch! 

A few weeks ago, you already heard predictions from lots of IAPP Brussels visitors for 2022. Today, you’ll hear ours. Will they come true? Do you agree? 

We had amazing guests on this season and our first season. It is difficult to choose which ones to feature in this episode. Some episodes are chosen by the listeners, so those are easy, but the others - not so easy at all. You will hear select clips from Helen Dixon about international investigations and dealing with criticism, Romain Robert with noyb (about enforcement taking time), tracking and dark patterns, from episode 36 (Jocelyn Paulley, Partner at Gowling WLG in London and Lindsey Schultz, Senior Counsel at Global Privacy for Visa), Eric Cole (cybersecurity and ethical hackers - episode relevant again because of Log4Shell), and Emerald de Leeuw (recommendation for Paul to get started) - along with information on PIPL and SCCs. 

As always, please feel free to share your thoughts with us - therewill be a year end show on the best episodes. Get your vote counted! Follow us on LinkedIn as Serious Privacy and on Twitter @podcastprivacy @EuroPaulB and @HeartofPrivacy. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This week on Serious Privacy, Paul Breitbarth and K Royal take some time to review recent events or developments in privacy and data protection. With little happening in the U.S. (where is Ohio’s privacy law?), the focus is more on Europe and India. K and Paul discuss the European Data Protection Board’s recent guidance on international transfers, the new decision by the Wiesbaden court (in Hesse, Germany) on cookies and the U.S., and the highest fine to date in the Netherlands. 

Join K and Paul as they explore what the U.S. Cloud Act has to do with cookies. It’s not really clear, but more information has come with the publishing of the interim order. 

And lastly, there is news to share on a personal level. Tune in to find out. As always, please feel free to share your thoughts with us - therewill be a year end show on the best episodes. Get your vote counted! Follow us on LinkedIn as Serious Privacy and on Twitter @podcastprivacy @EuroPaulB and @HeartofPrivacy. 

Resources

• The German case decision on cookies 
• The white paper on the US Cloud Act 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This week on Serious Privacy, Paul Breitbarth and K Royal speak with Lourdes Turrecha. Where a year of five ago many companies could still run their data protection and privacy compliance programs with email, spreadsheets and word files, today’s reality is completely different. Accountability, documentation and reporting requirements are much more detailed and widespread than they were before. Privacy technology is on the rise, and we sure know something about that at TrustArc! But privacy tech is not just about privacy management - it is also about privacy enhancing technologies, smarter processing technology and improved data security. 

Our guest this week knows all about this. Lourdes is the Founder & CEO of PIX LLC, an innovative privacy firm in Silicon Valley, and the Founder and Chief Privacy Tech Evangelist of The Rise of Privacy Tech (TROPT), a movement that brings together privacy innovators, investors, experts, and evangelists to further privacy innovation. She is also Privacy Tech & Law Fellow and Adjunct Professor of Privacy Law at Santa Clara University School of Law.

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. We also have a LinkedIn page for Serious Privacy, so please follow for more in-depth discussion.

Resources

• The 2021 Defining the Privacy Tech Landscape white paper 
• Privacy Tech Startup Deal Flow (for startups that are fundraising)
• TROPT Innovators membership (to get plugged into the privacy tech space and build relationships with other privacy tech founders, investors, and experts)
• TROPT Data Privacy Week 2022

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This week on Serious Privacy, Paul Breitbarth and K Royal take to the streets, so to speak, at the IAPP global conference in Brussels. Well, Paul did and K benefitted. Join us as we hear the thoughts, predictions, and worries of fabulous privacy professionals. [Paul relayed the comments that he received - it was humbling & heartwarming, so thank you! As much as you appreciate us, we return the respect tenfold.]

Predictions and worries include thoughts on AI, using data for good, awareness of our digital beings, children's privacy, Brexit, joint enforcement, and other wildly exciting privacy / data protection topics. Most of these are top of mind for many of us... or are they?

A big thank you to all of our guests for this episode:

• Alexander Hanff Hanff & Co
• Andreea Lisievici Volvo
• Anna Pouliou Deloitte
• Aoife Sexton Truata
• Bojana Bellamy CIPL
• Caroline Olstedt Carlström Cirio
• Estelle Massé Access Now
• Gabriela Zanfir-Fortuna Future of Privacy Forum
• Rob van Eijk Future of Privacy Forum

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This week on Serious Privacy, Paul Breitbarth welcomes K Royal, the recently-approved PhD graduand (yes, it’s a word) fresh from her dissertation defense on Privacy Complaince in US Universities. Many of our listeners likely participated in the nearly-anonymous Delphi Method part of her research, where privacy professionals around the world answered a series of questions to determine critical parts about privacy in the university setting. These included triggers, program elements, and risk factors. Her PhD is in public affairs, a fitting match for privacy law, from the University of Texas at Dallas, the School of Economic, Political, and Policy Sciences.

Join us as we discuss the substance of privacy law at US universities, some common misperceptions, but also the difference in the PhD process between the US and Europe. Some of your favorite topics come up, such as CCPA, GDPR, and HIPAA. Also, her research involves the complexity of managing privacy law in a complex environment, bringing in Complexity Theory as a framework. Complex Adaptive Systems was used in terms of privacy law by Zhang and Schmidt when considering China’s privacy law back in 2015 in their paper Thinking of data protection law's subject matter as a complex adaptive system: A heuristic display.

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. We also have a LinkedIn page for Serious Privacy, so please follow for more in-depth discussion.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This week on Serious Privacy, Paul Breitbarth and K Royal jump back across the ocean to North America. While everyone is focused on the Chinese Personal Information Protection Law that was passed on August 20 and went into effect November 1, 2021, Quebec quietly passed Bill 64, (C-11) “An Act to modernize legislative provisions as regards the protection of personal information.” It received assent on September 22, 2021, with a majority of its provisions coming into force over the next two years. 

Joining the podcast today are two experts in Canadian privacy law, Jennifer Stoddart and Constantine Karbaliotis. Jennifer was the Privacy Commissioner of Canada from 2003 to 2013 and previously served as the Chair of the Commission d'accès à l'information du Québec from 2000 to 2003 and has also held positions on the Human Rights Commissions of Canada and Québec. Constantine is likewise no slacker when it comes to privacy law, having nearly 20 years experience in both the private and public sector, helping companies comply with complex privacy laws from US, Canada, and the EU.

Join us as we discuss the ins and outs of the new Quebec law, the complications you might see, the necessary steps you need to take to be compliant. In the conversation, we will also discuss some of the nuances with integrasting privacy programs and how GDPR impacts Canadian activities.

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. We also have a LinkedIn page for Serious Privacy, so please follow for more in-depth discussion.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

What does a PhD dissertation, privacy books, the color of orange, and biometric legislation have in common? No, this is not some lame joke, but there is one of those in the episode. This week on Serious Privacy, Paul Breitbarth and K Royal present one of their back porch / kitchen table conversations. The episode may be slightly messy. It might be slightly longer than you are used to,  but a lot of updates are covered since it's been so long since one of these episodes given all the developments in privacy law. 

In this episode, Paul and K catch up on various topics, such as those listed above, but also a brief look into some of the upcoming episodes, such as the new law out of Quebec (more on that in the next episode) and the PIPL webinar on November 9, 2021. Be sure to catch that. In addition, please keep in mind that TrustArc has lots of resources for you - most are available on the PIPL microsite https://trustarc.com/china-pipl/.They also discussed K’s brief experience at the IAPP PSR 2021 in San Diego, CCPA developments, and enforcement actions.

Join us for Paul’s reading recommendations for two great books: the first one is part of the  Future of Privacy Forum's  book club this month - Privacy is Hard and seven other myths by Jaap-Henk Hoepman. The second one is There is a War Going On But No One Can See It by Huib Modderkolk. 

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. We also have a LinkedIn page for Serious Privacy, so please follow for more in-depth discussion.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This week on Serious Privacy, Paul Breitbarth and K Royal revisit the Chinese Personal Information Protection Law that goes into effect just a few days after publication of this episode. K and I spoke about this law already in episode 30 of this season, dated 31 August, as well as during our webinar on 15 September. However, questions keep flooding in, so we decided to record a follow up episode. The guidance coming out of China is still limited, although it seems the Cyberspace Administration of China, their main regulator, is starting to publish some explanatory documents. 

Today, we are joined by Graham Webster. Graham is a Research Scholar at the Stanford Cyber Policy Center, as well as Editor in Chief of the university’s DigiChina website, a great resource providing lots of translations of China’s digital laws and policy documents. He is an expert on issues at the intersection of U.S.–China relations and advanced technology, and we are very happy he is joining us today.

In addition, please keep in mind that TrustArc has lots of resources for you - most are available on the PIPL microsite https://trustarc.com/china-pipl/ and include the previous webinar, a whitepaper, FAQs, the prior podcast and other valuable information. PLUS - the next webinar on November 9 - register now.

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. We also have a LinkedIn page for Serious Privacy, so please follow for more in-depth discussion.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth and K Royal connect with Jocelyn Paulley, Partner at Gowling WLG in London and Lindsey Schultz, Senior Counsel at Global Privacy for Visa.  This episode is a preview of a session that Jocelyn, Lindsey, and K are presenting on along with Chris Oates, a partner at Gowling WLG in Toronto on Privacy Compliance in the AdTech Industry at the Association of Corporate Counsel's Annual meeting of 2021.

Increasingly, advertising is going digital and being tailored to the viewer to increase conversion rates which necessitates the processing and sharing of vast amounts of personal data by the parties involved in getting an ad to the consumer. We will look at the privacy issues arising from a personal data test case from a European, Canadian, and US perspective, where regulators have this industry under the microscope and draft regulations could further tighten use of cookie and pixel technologies.

Join us as we discuss cookies, profiling, and other fascinating aspects of advertising. If you have comments or feedback, please let us know via email or connect with us on LinkedIn for Serious Privacy or on Twitter @PodcastPrivacy, @EuroPaulB, @HeartofPrivacy, @TrustArc.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth and K Royal hosted Carolin Lynch, the founder and owner of Copper Hill Strategies, has fifteen years of experience on the U.S. Capitol Hill, including a decade with the House Judiciary Committee where she served for eight years as the Chief Counsel of the Subcommittee on Crime, Terrorism, Homeland Security, and Investigations. As Chief Counsel, Caroline was at the forefront of developing some of the most high-profile privacy, cybersecurity, national security, and criminal laws of the 21st Century. She authored dozens of pieces of legislation and developed strategies to successfully shepherd those bills through Congress. Caroline is also a member of the Arizona Advisory Committee of the U.S. Global Leadership Coalition.

The topic? U.S. government surveillance activities. Join us as we discuss this sensitive topic that underpins the invalidation of the EU-US Privacy Shield and is the root problem of the infamous Schrems II decision by the Court of Justice of the European Union in July 2020.

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. We also have a LinkedIn page for Serious Privacy, so please follow for more in-depth discussion.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This week on Serious Privacy, K Royal presents her vacation episode. You’ve had to wait for it a little while, because of all the recent news and developments, but here it is: privacy at home. K has a long conversation with her husband, Tim Foley, about how living with a privacy professional has influenced their life together, as well as the education of K’s children. Furthermore, they talk about passwords, movies and series that involve privacy and much more. Oh, and we have some special four legged guests joining the conversation every now and then. That’s what you get when recording from home...

As a reminder, a few weeks ago we released Paul’s vacation episode, a conversation with the DPO of the International Committee of the Red Cross.

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. We also have a LinkedIn page for Serious Privacy, so please follow for more in-depth discussion.

Resources

• Movies That Can Help You Understand Data Privacy and Hacking - CPO Magazine
• Most Popular  Movies and TV Shows tagged with keyword "privacy"  - IMDb
• The Complete List of Hacker And Cybersecurity Movies
• Most Common Passwords of 2021
• Password and email breach check: www.haveibeenpwned.com 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth and K Royal discuss another fascinating privacy enhancing technology (PET) where individuals control their personal data. Yes, individuals control it. We met with Markus Lampinen, the co-founder and CEO of Prifina, which focuses on building an open data market, where individuals gain value from their data and developers get democratized data access.

Developers are able to work with large amounts of data, such as that from personal wearable devices, without storing the actual data themselves. That is possible, because all data would be stored in private, personal data clouds owned by individuals. This approach, or similar, has been discussed for years. Can it really work, with only local processing being available? Is privacy an open-market? Is it too late to reclaim our privacy? Markus will be able to tell us all about this - and more. 

To learn more about Prifina, please see these two resources:

• Harvard article:  user-held data framework 
• And another  arguing for personal data to be treated as personal property

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. We also have a LinkedIn page for Serious Privacy, so please follow for more in-depth discussion.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Paul Breitbarth and K Royal connect with Romain Robert, is the program director and a senior lawyer for noyb, actively participating in their research and litigation strategy. Romain is also a member of the litigation chamber of the Belgian Data Protection Authority and previously worked as legal advisor for both the Belgian DPA and European Data Protection Supervisor.  

The name Max Schrems should be familiar. And also noyb - an acronym for None Of Your Business - probably sounds familiar. Noyb is the consumer rights group founded by Max Schrems. Based in Vienna, this data protection watchdog likes to put major topics on the plate of the data protection authorities. From forced consent to shady cookie banners, and from advertising in dating apps to international transfers. Learn what noyb is - and what it is not.(They are also hiring…)

Join us as we discuss the noyb cookie banner project, membership in this entity, and several key enforcement actions, such as locatemyfamily.com and Rocketreach. We also touch on the class action case from  The Privacy Collective, and the Protonmail case order. 

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. We also have a LinkedIn page for Serious Privacy, so please follow for more in-depth discussion.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breitbarth and K Royal meet up with humanID, a non-profit and open source project, supported by Mozilla and Harvard University. Looking at their website, this is a great example of privacy by design and PET (privacy enhancing technology). Our guests, Bastien Purrer and Namik Muduroglu,  are working on a solution they claim offers “an anonymous, bot-resistant authentication for safer online communities.” Why? So people can engage in open, honest debate on topics of their choice, free from the influence of bots or people with multiple accounts.

Driven by the ideals of a free society - one person, one vote - Human ID seeks to put people on equal footing. This also serves to allow people to debate without perhaps impacting their jobs. Human ID is a start-up, so they are new and staffed entirely by volunteers at this point. Their SSO capability verifies and anonymizes users. Listen and then let us know what you think.

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. We also have a LinkedIn page for Serious Privacy, so please follow for more in-depth discussion.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of Serious Privacy, Paul Breitbarth and K Royal discuss the new China Personal Information Protection Law (PIPL) that was adopted on 20 August. This new omnibus data protection law will enter into force on 1 November 2021, without a transition period to comply. 73 days between adoption and entry into force is a very short deadline for compliance, especially for a wide-ranging and complex law such as the PIPL. Although many details remain unclear for the time being, during this week’s episode, your hosts will try to guide you through the main characteristics of the new Chinese data protection law. 

TrustArc will soon make further resources, including a white paper, available via a special microsite at TrustArc.com (select Solutions > Solutions by Regulations > PIPL Compliance Solutions). We also welcome any specific questions you may have on the China PIPL for a future episode of Serious Privacy. Please note that K and Paul recorded this a week before publishing, so there are quite a few items that have since been researched and nuanced excellently outside this episode.

In the meantime, we can already refer you to the following blogs:

• China Personal Information Protection Law Adopted
• Getting Started with PIPL Compliance

A webinar will be announced shortly. The registration link will become available here: https://trustarc.com/resource_types/webinars/.  

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. We also have a LinkedIn page for Serious Privacy, so please follow for more in-depth discussion.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a Text Message.

Gone are the days when you had to line up at a physical store to purchase a set of disks with the latest software. Nowadays, you just go to an online app store and download what you need, or even easier: just subscribe via a website and start using the software in your computer browser: Software as a Service, or SaaS. And that is exactly what Paul and K are talking about today. 

K will soon be speaking on a panel for the Association of Corporate Counsel 2021 Annual Meeting, together with other in-house counsels like Jennee Devore and Rosemary Kuperberg. The topic is "The Fine Art of Kicking SaaS". Given the scope of this large topic, the speakers will not be able to cover everything during their presentation, but the combination of expertise of this group with their extraordinary hands-on experience seemed a natural fit for the podcast. Certainly, we will not cover the webinar materials per se, but have more of an open conversation about SaaS services, how they've grown, and how they have been impacted by recent events.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of #SeriousPrivacy, Paul Breitbarth and K Royal discuss the summer news. From a major GDPR fine (CNIL, WSJ, LQDN), to a tech company planning to monitor smartphones for child pornography (WaPo, IAPP), and from CCPA enforcement in California to cookie consent banner complaints (noyb), it is all discussed during this episode. 

If you want to stay up-to-date on a daily basis of all the privacy news and its implications for global data protection compliance, why not take a look at TrustArc’s suite of Nymity products dedicated to privacy knowledge? 

Also referenced in this episode:

• Our recent webinar on privacy and health data
• Our forthcoming webinar on the Brazilian LGPD
• The U.S. Supreme Court judgment in TransUnion LLC v. Ramirez
• Use of ANPR cameras for facial recognition (NRC, in Dutch)
• Vacancy for the position of Executive Director of the California Privacy Protection Agency
• The Mintz Matrix for data breach notification requirements 
• Appointments to the Brazilian CNPD (in Portuguese)
• Future of Privacy Forum paper on Health Data

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. We also have a LinkedIn page for Serious Privacy, so please fol

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

This week, #SeriousPrivacy is in summer mode, with a special episode from the borders of Lake Geneva in Switzerland. Paul Breitbarth had the opportunity to speak to Massimo Marelli, Head of the Data Protection Office of the International Committee of the Red Cross and the Red Crescent (ICRC). Massimo is one of the authors of the Handbook on data protection in humanitarian action, and leading the various efforts of the ICRC to meet data protection standards both at headquarters and in the field.

K Royal provides a short introduction explaining a little about the definition of "International organization" in Article 4 of the GDPR - "‘international organisation’ means an organisation and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries."  As promised here is a list of international organizations.  -

In this episode, you will hear about why data protection would matter in a humanitarian crisis situation, how the ICRC is dealing with personal data across the board and what efforts are made to raise awareness for data protection in other humanitarian organisations. Part of the awareness raising effort is the Data Protection Officer (DPO) Humanitarian Action Certification that was recently launched by Maastricht University and is supported by TrustArc. 

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. We also have a LinkedIn page for Serious Privacy, so please follow for more in-depth discussion.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of #SeriousPrivacy, Paul Breitbarth and K Royal meet up with Tash Whitaker, who is an outsourced DPO as a service. Not all organizations have the capability to organise the DPO role in house. Maybe they are too small, or they are just lacking the right people or qualifications to take on the role. For those companies, the outsourced DPO is a great option to consider.  

A year after the entry into force of GDPR, the IAPP estimated that already some 500.000 organisations has appointed and registered a data protection officer, and that number has only grown since. And Europe is of course not the only region in the world that knows the mandatory requirement to appoint a DPO. And then we are not even talking about the voluntary appointment of a DPO, in order to ensure that organisations have their data processing operations under control.

Join us as we discuss challenges and surprises in an outsourced role of DPO, helpful both for companies who realize they need a DPO but not sure how to obtain one and for those privacy professionals thinking of making the leap off the corporate bridge. And always, the solution for a successful internal or external DPO is the TrustArc Platform - we don't talk about products much in the podcast, so please do contact [email protected] for information on our solutions - especially Privacy Central!

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. We also have a LinkedIn page for Serious Privacy, so please follow for more in-depth discussion.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of #SeriousPrivacy, Paul Breitbarth and K Royal met with Emerald de Leeuw, Global Head of Privacy at Logitech. She has a wealth of experience in the tech markets, being an entrepreneur, and a high-level executive in a global and male-dominated field. In this episode, we want to leverage her experience in coming into a company and what do you focus on first?  Do you do a risk assessment, meet the key players, review the policies, what? Where do you start?

Along the way, we also touch on some of the current topics in privacy, cybersecurity, and data protection. Other topics included technology and its advances as well as how COVID has impacted the way the privacy office works. Do we need to be in person? Are we equipeed to work remotely?  What are we missing if we don’t have water cooler conversations?

Join us as we discuss this and more: what should new privacy officers do when they start a new job? What is key to your success? And a little about DIY home projects and West Wing.

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. We also have a LinkedIn page for Serious Privacy, so please follow for more in-depth discussion.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of #SeriousPrivacy, Paul Breitbarth and K Royal covered a broad range of privacy developments along with responding to questions from listeners. New developments includ the new Colorado Privacy Act, SB21-190. Signed by Governor Jared Polis on July 7, it is now the third state omnibus privacy law in the US, with Virginia having passed the Consumer Data Protection Act (CDPA) earlier this year and of course, the Calfornia Consumer Privacy Act (CCPA). We have a 4 part series on the Colorado Privacy Act. We also did a podcast on it a little while back.

In this episode, we also discussed the anniversary of Schrems II, the ongoing efforts to establish a Privacy Shield replacement, international data transfers, and GDPR validation (TrustArc has you covered on both of the latter two). And during the episode, there are references to guidance on Codes of Conduct that has now come out by the European Data Protection Board (we'll get you more information!) or in relation to US state laws, Ohio just had its privacy bill introduced. Privacy things happen quickly.

Join us as we also discuss some basic topics such as business and publicly available personal information (the difference between Europe and US),  interacting with individuals (who are not controllers as noted in EDPB guidance), EU data centers, and UK surveillance. Some of the items were driven by fan questions, so please keep sending them in, such as on the LinkedIn page for Serious Privacy. 

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. We also have a , so please follow for more in-depth discussion.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On 28 June 2021, the European Commission announced it has approved two adequacy decisions for the United Kingdom (UK). With these decisions, one under the General Data Protection Regulations (GDPR) and one under the European law enforcement directive, the Commission confirms the UK offers a level of data protection that is essentially equivalent to that in the European Union (EU). With this hurdle out of the way, personal data can continue to flow freely from the EU to the UK, without the need for additional safeguards or regulator approval. The free flow of data in the other direction, from the UK to the EU, had already been confirmed by the British government at the time the UK ceased being a member of the EU. 

But will the UK adequacy decisions stand the test of time? Not only do they expire automatically after four years, but the opponents are also sharpening their knives for a challenge in court. And the UK Government seems eager to drop the memory of the GDPR, and to replace the UK GDPR with a more trade and business friendly data protection law. This week, Paul Breitbarth and K Royal discuss the details of the UK adequacy decisions and the future of data protection law in Britain with our own UK expert Ralph O'Brien.

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. We also have a LinkedIn page for Serious Privacy, so please follow for more in-depth discussion.

Resources:

• TrustArc Blog on the UK Adequacy Decisions
• Webinar on EU International Transfer developments
• TrustArc Microsite on international  data transfers  

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of #SeriousPrivacy, Paul Breitbarth and K Royal discuss the potential new law for Colorado, the Colorado Privacy Act, SB21-190. On June 8, it was passed by the House, meaning it is now ready for the governor’s signature. If it passes, it will be the third state omnibus privacy law in the US, with Virginia having passed the Consumer Data Protection Act (CDPA) earlier this year and of course, the California Consumer Privacy Act (CCPA). 

In this episode, we cover elements such as government practices, individual rights, the extensive opt outs, and key definitions. For example, one topic is centered on how in Colorado bills can become law by “letting it ride” after 30 days - and why Colorado has 30 days for the governor to sign. This contrasts with the federal provision of the pocket veto. 

Join us as we discuss the specifics of the potential Colorado Privacy Act, its penalties, and its comparisons to the CCPA, Virginia CDPA, and the GDPR. More detail on the Colorado Privacy Act can be found on TrustArc’s website, where we provide extensive detail in a series of four blogs - 

• Part I - a general overview with key definitions and enforcement 
• Part II - individual rights
• Part III - special processing activities and opt outs (sales of data, profiling, targeted ads)
• Part IV - responsibilities of the parties and contracts

If you did not catch today's webinar on the SCCs and EU activities, please feel free to watch it - hot off the presses with both Paul and K. 

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. We also have a LinkedIn page for Serious Privacy, so please follow for more in-depth discussion.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On 21 June 2021, the European Data Protection Board (EDPB) released the long-awaited updated Recommendations on possible supplementary measures when transferring personal data out of the European Economic Area (EEA). These Recommendations align with the new Standard Contractual Clauses for International Transfers that were released by the European Commission on 4 June 2021 and require organisations to conduct third country risk assessments before transferring personal data. In this episode, Paul Breitbarth and K Royal discuss the details of the new European guidance, but also comment on how to do all this work in practice. Is it for example reasonable to expect such detailed assessments from companies? Is the risk-based approach really back? And how does all of this guidance relate to the whole debate about the scope of application of the GDPR. The lawyers in Paul certainly don’t seem to agree on the interpretation of the GDPR… 

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favourite podcast app.

Resources

• TrustArc has a website providing further guidance on International Data Transfers 
• Paul and K are doing a webinar on International Transfers on 30 June 2021 at 11am ET. You can register here.

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of #SeriousPrivacy, Paul Breitbarth and K Royal connect with Representative Domingo DeGrazia, of the Arizona House of Representatives to discuss the privacy legislation he has proposed (HB 2865), but which has not gained significant ground in Arizona. He is a licensed attorney, has professional experience in aerospace and computers, and is a Certified Information Privacy Professional / US through the International Association of Privacy Professionals.

This was his third year proposing privacy law for Arizona and he intends to continue. In speaking with Rep. DeGrazia, Paul and K were interested in his philosophy, drivers, and influencers towards state privacy law. The conversation includes elements on how bills are passed on a state level, including one-year versus two-year legislatures. Arizona has a one-year session, so bills that do not pass must be filed again the next year. He also discusses how he was motivated by the Washington proposed privacy act (the most recent that did not pass SB 5062), the California Consumer Privacy Act, and the European Union’s General Data Protection Regulation - and you can see these influences in his bill.

Join us as we discuss private right of action, data breach notification, and the level of education that needs to happen for legislators to understand the importance of privacy law. Rep. DeGrazia shared his thoughts on a federal privacy law, too. We also discuss Arizona’s inclusion of privacy in its constitution, one of only eleven (11) states to do so, along with a (very brief mention) of a recent Arizona Supreme Court Case, Arizona v. Mixton, which involved privacy. 

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week's episode  of #SeriousPrivacy, Paul Breitbarth and K Royal discuss the new Standard Contractual Clauses (SCCs) for international transfers that were adopted by the European Commission on 4 June 2021. These model contracts, that come in four modules, finally replace the old SCCs, some of which date back to the early 2000s. The modernised versions are fully GDPR compliant, embrace the accountability principle and include many requirements to address the limitations set by the Schrems II decision.

Listen to the conversation to get a better understanding of what the new SCCs entail and how they can (and cannot) be used by organisations. You will hear more about why some non-European companies will not have to use SCCs going forward, but also on the assessments that you will need to undertake. 

Since recording the episode, the timelines for the Transfer SCCs have become clear too:
27 June 2021 - the new SCCs become applicable
27 Sept 2021 - the old SCCs become invalid for new contracts
27 Dec 2022 - all SCC-based contracts will need to be updated

Resources

• TrustArc blog introducing the new SCCs
• TrustArc microsite with all international transfer related information 

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of #SeriousPrivacy, Paul Breitbarth and K Royal connect with Dr. Eric Cole, on the release of his new book today Cyber Crisis - Protecting Your Business from Real Threats in the Virtual World.  Fascinating insight, especially given the Colonial Pipeline incident recently, but a book that is not intended to be fairytales and happily-ever-afters. Dr. Cole holds a master’s degree in computer science from New York Institute of Technology and a doctorate from Pace University, with a concentration in information security. He was a CIA hacker, a member of the commission on cybersecurity for the forty-fourth president and is a member of several executive advisory boards, including the Forbes Technology Council. He was inducted into the 2014 Infosecurity Hall of Fame. This is his seventh book, and he not only knows this subject well he knows how to present it so we understand it.

In this episode, we dive deep into the connection between cybersecurity and privacy. Coincidentally, the Transportation Security Administration (TSA) just released its first ever regulation on pipeline companies - which includes cyberprotection and breach response. He also provides guidance, such as two-factor authentication truly is the best deterrent the average person can put in place to secure their accounts. If someone hijacks your accounts and implements it before you do, you will have a Herculean task to recover your own accounts. As he states in chapter 8 “In cyberspace, it’s anarchy, and in anarchy, you need to protect yourself.” 

Join us as he shares the top 4 things that need to be addressed to keep data secure. We also discuss the relationships between privacy and security, the typical CEO perspective on privacy officers, and how hundreds of thousands of offices were opened due to COVID… and we still are not addressing remote work protocols. Lastly, did you know that ethical criminals make a difference in the ransomware world. 

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of #SeriousPrivacy, Paul Breitbarth and K Royal discuss the European Union’s General Data Protection Regulation, because three years ago from the day this episode was released (May 25, 2021), the GDPR went into effect.  And whether you consider it three years or or five (per this Twitter debate), it was a world-changing event. 

In this episode, they talk about the changes seen in the past three years, including the two years before that when the GDPR was passed. They discuss penalties and amounts known, but also the most frequent violations. Companies can learn alot by looking at enforcement to know where to prioritize their compliance activities - or at least what to check to make sure it is properly in place. They discuss the locatemyfamily.com that has been in the news lately, including for not appointing a European representative, and the challenges the data protection authorities faced to investigate the complaints across the ocean.

In addition, they discussed how the GDPR impacted US legislation, such as the concept of controllers and processors, and the definition of sensitive personal data. The GDPR influenced the California Consumer Privacy Act (CCPA), or more so the California Consumer Privacy Rights Act (CPRA) and the Virginia Consumer Data Protection Act (CDPA) - the latter two take effect in 2023. There is discussion of the importance of EU representatives - and there is a passing mention of the upcoming standard contractual clauses. 

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

On this week of #SeriousPrivacy, Paul Breitbarth and K Royal connect with Ray Everett, Founding Member & Chief Privacy Intelligence Officer at Data Secrets, a company that develops solutions focused on identifying risk wherever applications are accessing your data -- in the public cloud, in SaaS applications, and on-premise. He has a long history working as a privacy professional, including at TrustArc, and was appointed as the first Internet-era Chief Privacy Officer in 1999 - starting with speaking on an U.S. Federal Trade Commission panel as a law student and moving into founding what is now the International Association of Privacy Professionals (#IAPP).

In this episode, we talk about APIs and SDKs - the benefits and challenges, along with managing them in a world that focuses on privacy and data protection. This brings in the requirement for data inventories and visibility into the movement of data, which is critical to identify early if there has been a data breach or unauthorized data access.

Join us as we explore mobile apps, AI, and external storage considerations. The conversation ranges from Privacy by Design to DevOps, focusing on understanding the movement of data as well as why understanding the movement is important.  

As always, if you have any questions or comments, please feel free to contact us at [email protected]. In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breibarth and K Royal connect with the Global Privacy Officer at GameStop, Seán Dunne. He really knows the company well, given that he started in retail operations almost 12 years ago. Now, he is responsible for global data protection compliance with laws ranging from the familiar GDPR and CCPA, to the less well known Canadian anti-spam legislation, and the privacy laws of Australia and New Zealand. This is quite the perspective to share with our listeners who are curious about the challenges one faces with a truly global privacy office, that includes major operations in the US, Canada, Australia, and New Zealand, but is based in Europe. 

Gamestop operates on multiple fronts with online and brick and mortar locations, multiple streams of operations and data flows, and has consumers at various ages. It is quite complex, but fascinating to understand his priorities, challenges, and daily approach. We spoke about an EU privacy person managing the US privacy operations (particularly challenging), new state laws, the possibility of a federal law in the US, Privacy Shield, SCCs, and the criticality of a privacy dictionary. 

Join us as we discuss global privacy operations, preferences for “data protection” versus “privacy,” and the skills needed to be a successful privacy professional. Coming from the tech side of business, Seán has interesting insight on collaboration. As always, if you have comments or feedback, please contact us at [email protected].

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

Every year, in the final week of January, privacy professionals from around the world assemble in the north of Brussels for the Computers, Privacy and Data Protection Conference. In recent years, on the final day, the European Data Protection Law Review awards a young scholar award and hosts a panel to discuss the nominated papers. 

In this episode of Serious Privacy, Paul Breibarth and K Royal host the third of this year’s three finalists for the EDPL Award. Please join us for a conversation with Katherine Quezada Tavárez, a legal researcher at KU Leuven Centre for IT & IP Law (CiTiP) and LLM graduate of the Catholic University of Leuven, Belgium, but also holds a law degree from the Universidad Autónoma de Santo Domingo in the Dominican Republic, her mother country. 

Katherine wrote her paper on the Impact of the Right of Access in the Balance between Security and Fundamental Rights, not just focusing on the GDPR, but also on the EU’s Law Enforcement Directive and the so-called PNR Directive (Passenger Name Record), on the collection and use of traveller’s data for law enforcement and counter terrorism purposes.  

Join us as we discuss the rights individuals have to data held by law enforcement and why it is important that people know of these rights. Katherine provides some examples of how individuals may be impacted by incorrect information - which as you can imagine, could have disastrous consequences. Her main focus is on balancing the needs of the community (law enforcement) with the needs of the individual. Along the way, we also touch on Malta, the Dominican Republic, and FOIA (Freedom of Information Act in the U.S.).

As always, if you have comments or feedback, please contact us at [email protected].

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, Paul Breibarth and K Royal tackle the slew of development (or non-developments) in privacy around the world. What a week in privacy! We had the proposal for AI Regulation published in the EU, the UK adequacy opinion, and of course, several privacy bills in states around the US, and the United States Supreme Court decision in AMG Capital Management, LLC et al. v. Federal Trade Commission, decided the morning of the episode recording. 

The AI proposal has garnered much conversation, such as in this article by Politico and the summary by Dr. Gabriela Zanfir-Fortuna of the Future of Privacy Forum.  Paul and K discuss various aspects of the proposal including a few unexpected recommendations, or lack thereof. However, the UK adequacy opinion was not as surprising, but quite interesting. 

Once we turned to the US and state privacy bills, the end was near for several key states, and by the time this episode is live, we know that the Washington bill is dead once again. However, there remains hope for a couple of others given the dates of when sessions end, such as Florida - which we should know in a few days - it is scheduled for its third reading at this time. About 15 states still had bills at the time (see webinar on update by TrustArc on state privacy bills), and of course, the next legislative season may see more change. 

The FTC decision by the USSC was top of mind given its impact on FTC authority, which also led to discussions of the federal privacy bill by Rep. DelBene which proposes quite an expansion of FTC authority.  Please see this statement released by the FTC on the matter. This case was reminiscent of a prior case with LabMD (yes, different enforcement actions, but still speaking to FTC authority).

Join us as we discuss these developments and more in this episode of Serious Privacy. As always, if you have comments or feedback, please contact us at [email protected].

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

Every year, in the final week of January, privacy professionals from around the world assemble in the north of Brussels for the Computers, Privacy and Data Protection Conference. In recent years, on the final day, the European Data Protection Law Review awards a young scholar award and hosts a panel to discuss the nominated papers. 

In this episode of Serious Privacy, Paul Breibarth and K Royal host the second of this year’s three finalists for the EDPL Award. Please join us for a conversation with Taner Kuru, who holds a Bachelor and Master of Laws of Ankara University, in Turkey, and recently completed an advanced LL.M. in Law and Digital Technologies from the Leiden Law School in the Hague. He also just completed an internship at the United Nations Interregional Crime and Justice Research Institute (UNICRI) Centre for Artificial Intelligence and Robotics. (You can catch the first finalist from last week with Isabel Hahn on purpose limitation against big data and common practices.) 

During this conversation, we discuss how Taner became interested in genetic privacy and then specifically why he researched the concept of group privacy in pertinent data protection laws, such as the European Union’s General Data Protection Regulation and Turkey’s Kişisel Verileri Koruma Kurumu (KVKK). His journey started with CRISPR babies, which led to DNA companies, such as 23andMe and AncestryDNA, and finally into posts on REDDIT and published stories on individuals who have been surprised at some of their DNA results. Given some of the dramatic accounts, Taner became intrigued about whether the privacy of individuals who share DNA is protected. In particular, how do you protect the privacy of groups?

Join us to learn more about this topic and his conclusions. We also discuss precision medicine, the Havasupai case, consent, ethics, and dating apps. Fascinating topics to cover in one episode.

As always, if you have comments or feedback, please contact us at [email protected].

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

Every year, in the final week of January, privacy professionals from around the world assemble in the north of Brussels for the Computers, Privacy and Data Protection Conference. In recent years, on the final day, the European Data Protection Law Review awards a young scholar award and hosts a panel to discuss the nominated papers. 

In this episode of Serious Privacy, Paul Breibarth and K Royal host the first of this year’s three finalists for the EDPL Award on the podcast. Isabel Hahn holds a Bachelor of Laws degree from the London School of Economics and Political Science, recently completed an internship at NOYB and has just started a new internship with the European Data Protection Supervisor. Her paper focuses on the concept of purpose limitation, and the question whether or not it is still compatible with today’s data economy. Developments in privacy sometimes go so quickly, it is almost impossible to keep up.

Join us as we discuss purpose limitation and validating the concept against big data and common practices worldwide on the use of personal information. During this conversation, we cover a recent complaint in Austria against a credit rating agency, Article 5 of the GDPR, and characteristics of what Hahn terms data power companies: omnipresence in digital environment (builds insight into individuals lives), data volume (acquires and controls flow and repurposing), and ability to aggregate data. She believes that these three features combined lead to an asymmetry of value and a level of pervasive interference that is simply inequitable to the average consumer. 

You will also hear about compatible uses, using legitimate interests to balance the need or desire for new uses of data, and contextual integrity as discussed by Helen Nissenbaum. Lastly, because of course we have to address it with such a promising new professional - what is next in Isabel’s plan - does she intend to continue with privacy as a career? 

As always, if you have comments or feedback, please contact us at [email protected].

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

Demonstrating compliance is certainly not always easy, but under many laws, including the GDPR, it is a mandatory requirement. To facilitate the process, codes of conduct and certification schemes are becoming more popular, and it is no wonder they have been included in the GDPR as well. As we are on the verge of seeing the first codes of conduct to demonstrate GDPR compliance approved, Paul Breitbarth and K Royal discuss the EU Cloud Code of Conduct, which TrustArc is proud to support.

Join us and learn more about what the EU Cloud Code of Conduct entails, how it is supposed to work and what the benefits are of adhering to such a code. Oh, and don't be surprised for a little April Fools and Easter conversation this week too - the recording was made on 1 April... 

As always, if you have comments or questions, please contact us at [email protected].

Resources