Send us a text The European Parliament has released a groundbreaking 175-page study concluding that AI companies' practice of training on copyrighted material without permission constitutes mass reproduction not covered by current laws. This study recommends transforming the landscape through an opt-in system, radical transparency requirements, and fair compensation models for creators whose work trains AI systems. • EU study reveals AI companies are treating the internet like a free "all-you-ca...
Jul 10, 2025•7 min
Send us a text Cameron and Gabe dive into Healthline Media's record-breaking $1.55 million settlement for CCPA violations, examining whether such penalties are sufficient deterrents against improper sharing of sensitive health data. • Healthline violated CCPA by sharing sensitive user health data with advertisers without proper consent • First U.S. regulatory action against a company for disclosing "inferred sensitive data" • Violation included failing to provide mechanisms to opt out of sensiti...
Jul 03, 2025•15 min
Send us a text Several popular Chrome extensions, including privacy and security tools, have been found leaking sensitive data through unencrypted HTTP and hard-coded credentials in their code. Security is both hard and easy - hard because of existing unencrypted protocols and trust placed in developers, but easy because fundamental security practices should be common knowledge in 2025. • Chrome extensions including DualSafe Password Manager and Avast Online Security are leaking sensitive user d...
Jun 16, 2025•17 min
Send us a text We explore the recent LexisNexus data breach that exposed sensitive personal information of over 364,000 individuals through a third-party platform accessing their GitHub account. This incident highlights critical vulnerabilities in how data brokers handle our most sensitive information and raises questions about regulatory oversight. • Data exposed included names, date of birth, phone numbers, social security numbers, and driver's license numbers • The breach occurred when someon...
Jun 03, 2025•16 min
Send us a text Gabe and Cameron dive into the unseen dangers of AI systems, exploring how inherent biases shape our perception and how prompt injection attacks pose serious security threats. • Generative AI models contain built-in biases based on their training data, favoring Western and particularly North American perspectives • A recent study shows ChatGPT-4 with personalization is more persuasive than humans 64.4% of the time • Most users accept AI outputs without questioning the underlying b...
May 23, 2025•18 min
Send us a text ProPublica's investigation reveals the National Shooting Sports Foundation has been secretly sharing gun buyers' personal information, including underwear sizes, for political purposes. This privacy breach raises serious concerns about data exploitation even in industries that publicly position themselves as defenders of individual rights. • Gun owners group demands federal investigation into firearms industry data sharing • Personal data shared included underwear sizes and was al...
May 21, 2025•9 min
Send us a text Privacy Please News, for hitting big topics quickly with a hint of sarcasm to bring some joy and knowledge. This week, we hit on the latest privacy events in tech with a satirical perspective on how your data is being shared, sold, and exploited. From Google's dramatic stance on sharing search data to state-sponsored hackers dominating zero-day exploits, this episode highlights the absurdity of our current digital privacy landscape. • Google CEO Sundar Pichai compares sharing sear...
May 06, 2025•4 min
Send us a text Cameron and Gabe return after a brief hiatus to explore major developments in security, privacy, and resilience. They dive into insights from the IAPP conference and VeeamOn, examining how AI governance and outdated privacy tools are reshaping the industry landscape. • AI governance frameworks dominated IAPP discussions with companies "building the plane as they're flying" • Verizon's Data Breach Report debunks overblown AI security fears, showing real risks are data leakage and p...
Apr 30, 2025•14 min
Send us a text Privacy threats continue to escalate as human error undermines even the most secure systems, from military officials accidentally exposing classified information to Russian hackers targeting encrypted messaging apps. • Signal security breach occurred when defense officials accidentally added a reporter to their encrypted group chat discussing sensitive military operations • Russian-linked attackers targeting Signal users through QR code vulnerabilities, tricking users into linking...
Apr 07, 2025•21 min
Send us a text Privacy threats are intensifying across multiple fronts, from genetic data vulnerabilities at 23andMe to corporate violations and messaging app security concerns. Cameron Ivey breaks down three urgent privacy issues and provides practical guidance on protecting your digital footprint in an increasingly vulnerable online landscape. • 23andMe users should consider deleting their genetic data immediately due to bankruptcy proceedings that could compromise privacy protections • Law pr...
Mar 28, 2025•10 min
Send us a text We explore how uncertainty and chaos create both vulnerabilities and opportunities in privacy and security. Amid global turmoil, cybersecurity professionals must adopt a bias toward action to counter increased threats that thrive in chaotic environments. • Chaos serves as a smoke screen for malicious actors, just as DOS attacks once distracted from network intrusions • Recent Ghost ransomware attack affected 70 countries but received less attention due to global uncertainty • Secu...
Mar 12, 2025•12 min
Send us a text Today's episode dives into the intersection of AI behavior and digital security concerns. We discuss a startling incident involving a malfunctioning AI robot and explore a new ransomware threat known as Ghost. • Overview of an AI robot incident that raised ethical concerns • Examination of Asimov's Laws of Robotics and their relevance • Introduction to Ghost ransomware and its impact on multiple industries • Discussion on backup security strategies and resilience against ransomwar...
Feb 28, 2025•24 min
Send us a text The emergence of quantum computing presents a unique set of challenges and opportunities for data security and privacy. As Microsoft reveals its new quantum chip, the industry must prepare for the significant threats that stable quantum computing poses to existing encryption methods. • Microsoft announces a new quantum processing chip • Potential risks to encryption and data security • Industry skepticism toward claims of rapid advancements • Understanding the mechanics of quantum...
Feb 20, 2025•15 min
Send us a text The episode delves into the ongoing lawsuits challenging the sharing of personal data by federal agencies with Doge, the Department of Government Efficiency. The hosts discuss the implications of these lawsuits, particularly regarding the lack of clarity surrounding Doge's operations and the dismantling of the CFPB, raising concerns about privacy and data protection. • Overview of Doge data lawsuits and their significance • Concerns about data sharing by federal agencies • The tro...
Feb 14, 2025•20 min
Send us a text The episode examines the implications of a recent hacking incident involving the Chinese AI company DeepSeek, which claims to outperform competitors on cost and performance. We discuss the risks associated with AI tools, the necessity for better governance, and the broader impacts of AI on cybersecurity and data privacy. • DeepSeek's emergence as a significant player in AI • Performance claims that challenge established tech firms • Consequences of the recent hack on industry perc...
Feb 07, 2025•17 min
Send us a text The conversation centers on the evolving regulatory landscape amid a new administration, discussing the implications for data privacy and AI legislation. The episode emphasizes state-level movements and the potential for Congress to enact a cohesive national law while addressing emerging concerns around social media and technology. • Overview of the new administration's regulatory potential • Recent state-level data privacy laws and their implications • Importance of legislative c...
Jan 30, 2025•49 min
Send us a text Apple’s recent iOS update has raised serious privacy concerns by enabling AI tools that monitor user behavior without consent. The episode emphasizes the urgent need for users to disable invasive settings while questioning Apple's commitment to privacy amidst its marketing claims. • Examination of the AI features in the latest iOS update • Default settings that allow data collection on app usage • Discussion on Apple's reputation versus actual practices • Potential consequences fo...
Jan 16, 2025•24 min
Send us a text As 2025 kicks off, we explore the irony of the EU Commission fining itself for breaching its own data privacy regulations. The episode delves into the absurdity of minor fines, enforcement challenges, and the need for accountability in privacy governance. • Introduction to the state of the world in 2025 • Discussion of California’s wildfires and broader global issues • Examination of the EU’s self-imposed fine for data privacy violations • Analysis of the significance of a $412 fi...
Jan 09, 2025•9 min
Send us a text The episode reflects on the intertwined impacts of AI, privacy, and cybersecurity throughout 2024. We explore trends around ransomware, consumer trust in data privacy, and what to expect in 2025 as technologies evolve and regulations advance. • Discussion of AI's ambiguous role in cybersecurity • Rise of ransomware incidents and implications for critical sectors • Notable trends in consumer preferences regarding data privacy • Legislative developments in data protection regulation...
Dec 26, 2024•46 min
Send us a text Ever wonder how the privacy landscape in the United States is about to shift dramatically? As we return from our Thanksgiving celebrations, we promise you'll gain highlights into the eight new privacy laws that will redefine how businesses handle consumer data by 2025. States like Delaware, Nebraska, New Hampshire, and Iowa are leading the push for more consumer-friendly policies with default opt-out provisions and enhanced measures for children's privacy. Switching gears to cyber...
Dec 09, 2024•25 min
Send us a text Join us for an enlightening journey into privacy and technology with Avi, founder of TrustIZ. Discover proactive strategies to tackle privacy challenges and gain insights into Israel's evolving privacy laws post-GDPR alignment. Explore the intersection of privacy and cybersecurity and the transformative role of AI in privacy processes. Avi's dynamic perspective, inspired by the energy of Hamilton, emphasizes the importance of being "in the room where it happens." This episode is a...
Nov 25, 2024•52 min
Send us a text Discover how these cyber criminals impersonate bosses and coworkers, manipulating emotions to trick victims into transferring money or revealing sensitive information. Learn how to spot the red flags: from urgent requests that cloud judgment, to lookalike email domains designed to deceive. We'll guide you through practical steps to safeguard your organization, emphasizing the importance of communication and verifying requests through trusted channels. Join me, Cameron Ivey, as I b...
Nov 15, 2024•4 min
Send us a text In this episode of Privacy Please, uncover how cutting-edge technologies are transforming voting, and enhancing privacy and integrity in the digital age. Explore decentralized platforms like Mastodon for greater user control and transparency, and see how Bitcoin is shifting power away from traditional authorities. Dive into the potential of cryptographic tools and blockchain to authenticate media and voting information, reducing misinformation and boosting election transparency. T...
Nov 04, 2024•20 min
Send us a text What if a simple app failure could trigger chaos across the financial world? Explore the vital safeguards of Europe's Digital Operational Resilience Act (DORA) with host Gabe Gumbs on Privacy Please. This episode goes into how DORA is transforming digital infrastructure to withstand the onslaught of cyber threats like ransomware, ensuring that your access to financial services remains seamless and uninterrupted. From banks to tech providers, discover the global ripple effects of t...
Oct 26, 2024•9 min
Send us a text Imagine having just one key for every lock in your house—sounds handy, right? But when it comes to your online security, this convenience could lead to disaster. Join me, Cameron Ivey, as we navigate the treacherous waters of online safety during Cybersecurity Awareness Month, with a special spotlight on the simple yet powerful habit of password management. Fresh from my whirlwind travels to PSR in Los Angeles and a corporate retreat in Santa Rosa, I’m back, a little under the wea...
Oct 08, 2024•13 min
Send us a text Unlock the secrets of privacy innovation and assurance with our enlightening conversation featuring Aaron Weller from HP. Aaron walks us through his fascinating journey of establishing a new privacy engineering function at HP and expanding into privacy assurance. You'll discover how his team is tackling significant challenges, such as developing standards for data aggregation and preventing re-identification attacks, with practical examples like employee surveys and website perfor...
Sep 20, 2024•42 min
Send us a text California's Senate Bill 1047 is on the brink of becoming a law, and we're here to break down what that means for the tech industry and society at large. Tune in as I dissect how this controversial bill mandates rigorous testing of AI systems to identify potential harms such as cybersecurity risks and threats to critical infrastructure. I've got insights from policymakers, including Senator Scott Weiner, who argues that the bill formalizes safety measures already accepted by top A...
Sep 05, 2024•8 min
Send us a text Curious about the latest buzz from DEFCON and Black Hat? We promise you'll gain fresh insights into the world of cybersecurity, including a behind-the-scenes look at Palo Alto's marketing mishap that set the industry ablaze. Join Cameron Ivey and Gabe Gumbs as they shed light on the evolving landscape of cybersecurity, celebrating the growing contributions of diversity while acknowledging the industry's ongoing challenges. But that's not all—we dive into the nitty-gritty of AWS ac...
Aug 23, 2024•19 min
Send us a text Ever wondered how evolving privacy laws impact your company’s risk profile and compliance strategies? Join us for a captivating discussion with Ray, the Chief Compliance and Data Privacy Officer at TopCon Healthcare, and K, a seasoned privacy attorney with a unique nursing background. Ray shares his journey from the early days of HIPAA to his current challenges at TopCon, while K offers insights on transitioning seamlessly between legal and non-legal roles. Together, they unravel ...
Aug 13, 2024•1 hr 1 min
Send us a text What if a single cybersecurity incident could cost your company billions? On this episode of Privacy Please, Cameron Ivey and Gabriel Gumbs dissect the monumental CrowdStrike incident that left 8.5 million Windows machines vulnerable and sent shockwaves through the IT community. As a dedicated Linux user, Gabriel lends his unique perspective, backing CrowdStrike amidst the backlash and exploring why public overreactions might be misplaced. We dig into the staggering five billion d...
Aug 02, 2024•28 min
