Send us a text In this episode of Serious Privacy, Paul Breitbarth and K Royal hosted Carolin Lynch , the founder and owner of Copper Hill Strategies , has fifteen years of experience on the U.S. Capitol Hill, including a decade with the House Judiciary Committee where she served for eight years as the Chief Counsel of the Subcommittee on Crime, Terrorism, Homeland Security, and Investigations. As Chief Counsel, Caroline was at the forefront of developing some of the most high-profile privacy, c...
Oct 06, 2021•37 min•Season 2Ep. 35
Send us a text This week on Serious Privacy, K Royal presents her vacation episode. You’ve had to wait for it a little while, because of all the recent news and developments, but here it is: privacy at home. K has a long conversation with her husband, Tim Foley, about how living with a privacy professional has influenced their life together, as well as the education of K’s children. Furthermore, they talk about passwords, movies and series that involve privacy and much more. Oh, and we have some...
Sep 29, 2021•48 min•Season 2Ep. 34
Send us a text In this episode of Serious Privacy, Paul Breitbarth and K Royal discuss another fascinating privacy enhancing technology (PET) where individuals control their personal data. Yes, individuals control it. We met with Markus Lampinen , the co-founder and CEO of Prifina , which focuses on building an open data market, where individuals gain value from their data and developers get democratized data access. Developers are able to work with large amounts of data, such as that from perso...
Sep 22, 2021•43 min•Season 2Ep. 33
Send us a text On this week of Serious Privacy, Paul Breitbarth and K Royal connect with Romain Robert , is the program director and a senior lawyer for noyb , actively participating in their research and litigation strategy. Romain is also a member of the litigation chamber of the Belgian Data Protection Authority and previously worked as legal advisor for both the Belgian DPA and European Data Protection Supervisor . The name Max Schrems should be familiar. And also noyb - an acronym for None ...
Sep 15, 2021•47 min•Season 2Ep. 32
Send us a text In this episode of Serious Privacy, Paul Breitbarth and K Royal meet up with humanID , a non-profit and open source project, supported by Mozilla and Harvard University . Looking at their website, this is a great example of privacy by design and PET (privacy enhancing technology). Our guests, Bastien Purrer and Namik Muduroglu, are working on a solution they claim offers “an anonymous, bot-resistant authentication for safer online communities.” Why? So people can engage in open, h...
Sep 08, 2021•39 min•Season 2Ep. 31
Send us a text On this week of Serious Privacy, Paul Breitbarth and K Royal discuss the new China Personal Information Protection Law (PIPL) that was adopted on 20 August. This new omnibus data protection law will enter into force on 1 November 2021, without a transition period to comply. 73 days between adoption and entry into force is a very short deadline for compliance, especially for a wide-ranging and complex law such as the PIPL. Although many details remain unclear for the time being, du...
Aug 31, 2021•38 min•Season 2Ep. 30
Send us a text Gone are the days when you had to line up at a physical store to purchase a set of disks with the latest software. Nowadays, you just go to an online app store and download what you need, or even easier: just subscribe via a website and start using the software in your computer browser: Software as a Service, or SaaS. And that is exactly what Paul and K are talking about today. K will soon be speaking on a panel for the Association of Corporate Counsel 2021 Annual Meeting , togeth...
Aug 25, 2021•38 min•Season 2Ep. 29
Send us a text On this week of #SeriousPrivacy, Paul Breitbarth and K Royal discuss the summer news. From a major GDPR fine ( CNIL , WSJ , LQDN ), to a tech company planning to monitor smartphones for child pornography ( WaPo , IAPP ), and from CCPA enforcement in California to cookie consent banner complaints ( noyb ), it is all discussed during this episode. If you want to stay up-to-date on a daily basis of all the privacy news and its implications for global data protection compliance, why n...
Aug 18, 2021•42 min•Season 2Ep. 28
Send us a text This week, #SeriousPrivacy is in summer mode, with a special episode from the borders of Lake Geneva in Switzerland. Paul Breitbarth had the opportunity to speak to Massimo Marelli , Head of the Data Protection Office of the International Committee of the Red Cross and the Red Crescent (ICRC). Massimo is one of the authors of the Handbook on data protection in humanitarian action , and leading the various efforts of the ICRC to meet data protection standards both at headquarters a...
Aug 11, 2021•34 min•Season 2Ep. 27
Send us a text On this week of #SeriousPrivacy, Paul Breitbarth and K Royal meet up with Tash Whitaker , who is an outsourced DPO as a service. Not all organizations have the capability to organise the DPO role in house. Maybe they are too small, or they are just lacking the right people or qualifications to take on the role. For those companies, the outsourced DPO is a great option to consider. A year after the entry into force of GDPR, the IAPP estimated that already some 500.000 organisations...
Aug 04, 2021•38 min•Season 2Ep. 26
Send us a text On this week of #SeriousPrivacy, Paul Breitbarth and K Royal met with Emerald de Leeuw, Global Head of Privacy at Logitech . She has a wealth of experience in the tech markets, being an entrepreneur, and a high-level executive in a global and male-dominated field. In this episode, we want to leverage her experience in coming into a company and what do you focus on first? Do you do a risk assessment, meet the key players, review the policies, what? Where do you start? Along the way...
Jul 21, 2021•45 min•Season 2Ep. 25
Send us a text On this week of #SeriousPrivacy, Paul Breitbarth and K Royal covered a broad range of privacy developments along with responding to questions from listeners. New developments includ the new Colorado Privacy Act, SB21-190 . Signed by Governor Jared Polis on July 7, it is now the third state omnibus privacy law in the US, with Virginia having passed the Consumer Data Protection Act (CDPA) earlier this year and of course, the Calfornia Consumer Privacy Act (CCPA). We have a 4 part se...
Jul 14, 2021•41 min•Season 2Ep. 24
Send us a text On 28 June 2021, the European Commission announced it has approved two adequacy decisions for the United Kingdom (UK). With these decisions, one under the General Data Protection Regulations (GDPR) and one under the European law enforcement directive, the Commission confirms the UK offers a level of data protection that is essentially equivalent to that in the European Union (EU). With this hurdle out of the way, personal data can continue to flow freely from the EU to the UK, wit...
Jul 07, 2021•43 min•Season 2Ep. 23
Send us a text On this week of #SeriousPrivacy, Paul Breitbarth and K Royal discuss the potential new law for Colorado, the Colorado Privacy Act, SB21-190 . On June 8, it was passed by the House, meaning it is now ready for the governor’s signature. If it passes, it will be the third state omnibus privacy law in the US, with Virginia having passed the Consumer Data Protection Act (CDPA) earlier this year and of course, the California Consumer Privacy Act (CCPA). In this episode, we cover element...
Jun 30, 2021•30 min•Season 2Ep. 22
Send us a text On 21 June 2021, the European Data Protection Board (EDPB) released the long-awaited updated Recommendations on possible supplementary measures when transferring personal data out of the European Economic Area (EEA). These Recommendations align with the new Standard Contractual Clauses for International Transfers that were released by the European Commission on 4 June 2021 and require organisations to conduct third country risk assessments before transferring personal data. In thi...
Jun 23, 2021•43 min•Season 2Ep. 21
Send us a text On this week of #SeriousPrivacy, Paul Breitbarth and K Royal connect with Representative Domingo DeGrazia , of the Arizona House of Representatives to discuss the privacy legislation he has proposed (HB 2865) , but which has not gained significant ground in Arizona. He is a licensed attorney, has professional experience in aerospace and computers, and is a Certified Information Privacy Professional / US through the International Association of Privacy Professionals. This was his t...
Jun 16, 2021•42 min•Season 2Ep. 20
Send us a text On this week's episode of #SeriousPrivacy, Paul Breitbarth and K Royal discuss the new Standard Contractual Clauses (SCCs) for international transfers that were adopted by the European Commission on 4 June 2021. These model contracts, that come in four modules, finally replace the old SCCs, some of which date back to the early 2000s. The modernised versions are fully GDPR compliant, embrace the accountability principle and include many requirements to address the limitations ...
Jun 08, 2021•48 min•Season 2Ep. 19
Send us a text On this week of #SeriousPrivacy, Paul Breitbarth and K Royal connect with Dr. Eric Cole , on the release of his new book today Cyber Crisis - Protecting Your Business from Real Threats in the Virtual World . Fascinating insight, especially given the Colonial Pipeline incident recently, but a book that is not intended to be fairytales and happily-ever-afters. Dr. Cole holds a master’s degree in computer science from New York Institute of Technology and a doctorate from Pace Univers...
Jun 01, 2021•43 min•Season 2Ep. 18
Send us a text On this week of #SeriousPrivacy, Paul Breitbarth and K Royal discuss the European Union’s General Data Protection Regulation , because three years ago from the day this episode was released (May 25, 2021), the GDPR went into effect. And whether you consider it three years or or five ( per this Twitter debate ), it was a world-changing event. In this episode, they talk about the changes seen in the past three years, including the two years before that when the GDPR was passed. They...
May 25, 2021•39 min•Season 2Ep. 17
Send us a text On this week of #SeriousPrivacy, Paul Breitbarth and K Royal connect with Ray Everett , Founding Member & Chief Privacy Intelligence Officer at Data Secrets , a company that develops solutions focused on identifying risk wherever applications are accessing your data -- in the public cloud, in SaaS applications, and on-premise. He has a long history working as a privacy professional, including at TrustArc , and was appointed as the first Internet-era Chief Privacy Officer in 19...
May 20, 2021•40 min•Season 1Ep. 16
Send us a text In this episode of Serious Privacy, Paul Breibarth and K Royal connect with the Global Privacy Officer at GameStop , Seán Dunne . He really knows the company well, given that he started in retail operations almost 12 years ago. Now, he is responsible for global data protection compliance with laws ranging from the familiar GDPR and CCPA , to the less well known Canadian anti-spam legislation , and the privacy laws of Australia and New Zealand . This is quite the perspective to sha...
May 12, 2021•41 min•Season 2Ep. 15
Send us a text Every year, in the final week of January, privacy professionals from around the world assemble in the north of Brussels for the Computers, Privacy and Data Protection Conference . In recent years, on the final day, the European Data Protection Law Review awards a young scholar award and hosts a panel to discuss the nominated papers. In this episode of Serious Privacy, Paul Breibarth and K Royal host the third of this year’s three finalists for the EDPL Award. Please join us for a ...
May 05, 2021•38 min•Season 2Ep. 14
Send us a text In this episode of Serious Privacy, Paul Breibarth and K Royal tackle the slew of development (or non-developments) in privacy around the world. What a week in privacy! We had the proposal for AI Regulation published in the EU , the UK adequacy opinion, and of course, several privacy bills in states around the US, and the United States Supreme Court decision in AMG Capital Management, LLC et al. v. Federal Trade Commission , decided the morning of the episode recording. The AI pro...
Apr 28, 2021•40 min•Season 2Ep. 13
Send us a text Every year, in the final week of January, privacy professionals from around the world assemble in the north of Brussels for the Computers, Privacy and Data Protection Conference . In recent years, on the final day, the European Data Protection Law Review awards a young scholar award and hosts a panel to discuss the nominated papers. In this episode of Serious Privacy, Paul Breibarth and K Royal host the second of this year’s three finalists for the EDPL Award. Please join us for a...
Apr 21, 2021•36 min•Season 2Ep. 12
Send us a text Every year, in the final week of January, privacy professionals from around the world assemble in the north of Brussels for the Computers, Privacy and Data Protection Conference . In recent years, on the final day, the European Data Protection Law Review awards a young scholar award and hosts a panel to discuss the nominated papers. In this episode of Serious Privacy, Paul Breibarth and K Royal host the first of this year’s three finalists for the EDPL Award on the podcast. Isabel...
Apr 13, 2021•38 min•Season 2Ep. 11
Send us a text Demonstrating compliance is certainly not always easy, but under many laws, including the GDPR, it is a mandatory requirement. To facilitate the process, codes of conduct and certification schemes are becoming more popular, and it is no wonder they have been included in the GDPR as well. As we are on the verge of seeing the first codes of conduct to demonstrate GDPR compliance approved, Paul Breitbarth and K Royal discuss the EU Cloud Code of Conduct , which TrustArc is proud to s...
Apr 07, 2021•38 min•Season 2Ep. 10
Send us a text This week on Serious Privacy, Paul Breitbarth and K Royal , connect with Wayne Unger , a recent law school graduate, that is already very much embedded in the privacy profession. As a non-traditional student, Wayne was an experienced professional and quickly dove into the academic side of privacy with the intent to combine the scholarship and practical side of privacy. Wayne has authored three law journal articles, two of which are published and one is scheduled - going through a ...
Mar 31, 2021•39 min•Season 2Ep. 9
Send us a text Developments in privacy sometimes go so quickly, it is almost impossible to keep up. In this episode of Serious Privacy, K Royal and Paul Breitbarth , talk about many of these recent developments in order to bring you up to date again. Join us as we discuss the forthcoming stricter enforcement of cookie rules in France, a German court case prohibiting nudging end users towards accepting a privacy unfriendly option, and yet another set of CCPA Regulations . We welcome the appointme...
Mar 26, 2021•38 min•Season 2Ep. 8
Send us a text In this episode of Serious Privacy, K Royal and Paul Breitbarth host the new and first Chief Innovation Officer of the Federal Deposit Insurance Corporation (FDIC) in the US, Sultan Meghji . Sultan has a rich history as co-founder of Neocova which specializes in AI software for financial institutions, an adjunct professor at Washington University’s Olin Business School , a scholar of the Carnegie Endowment for International Peace , and an alum of the FBI Phoenix Citizens Academy -...
Mar 16, 2021•38 min•Season 2Ep. 7
Send us a text In this episode of Serious Privacy, K Royal and Paul Breitbarth connect with Steven (Seven) Waterhouse, PhD , CEO and founder of Orchid , a crypto powered VPN. Given his expertise and how it is harnessed for Orchid, we felt Seven would have quite a bit of technical insight into technologies commonly discussed in conjunction with data protection. He did not disappoint. In this episode, Seven provides insight into the technical side of privacy and the foundations that underpin most ...
Mar 09, 2021•40 min•Season 2Ep. 6
