Send us a text This week on Serious Privacy, Paul Breitbarth and K Royal speak with Lourdes Turrecha . Where a year of five ago many companies could still run their data protection and privacy compliance programs with email, spreadsheets and word files, today’s reality is completely different. Accountability, documentation and reporting requirements are much more detailed and widespread than they were before. Privacy technology is on the rise, and we sure know something about that at TrustArc ! ...
Dec 10, 2021•39 min•Season 2Ep. 42
Send us a text This week on Serious Privacy, Paul Breitbarth and K Royal take to the streets, so to speak, at the IAPP global conference in Brussels . Well, Paul did and K benefitted. Join us as we hear the thoughts, predictions, and worries of fabulous privacy professionals. [Paul relayed the comments that he received - it was humbling & heartwarming, so thank you! As much as you appreciate us, we return the respect tenfold.] Predictions and worries include thoughts on AI, using data for go...
Dec 02, 2021•39 min•Season 2Ep. 41
Send us a text This week on Serious Privacy, Paul Breitbarth welcomes K Royal , the recently-approved PhD graduand (yes, it’s a word) fresh from her dissertation defense on Privacy Complaince in US Universities. Many of our listeners likely participated in the nearly-anonymous Delphi Method part of her research, where privacy professionals around the world answered a series of questions to determine critical parts about privacy in the university setting. These included triggers, program elements...
Nov 24, 2021•41 min•Season 2Ep. 40
Send us a text This week on Serious Privacy, Paul Breitbarth and K Royal jump back across the ocean to North America. While everyone is focused on the Chinese Personal Information Protection Law that was passed on August 20 and went into effect November 1, 2021, Quebec quietly passed Bill 64 , (C-11) “An Act to modernize legislative provisions as regards the protection of personal information.” It received assent on September 22, 2021, with a majority of its provisions coming into force over the...
Nov 17, 2021•39 min•Season 2Ep. 39
Send us a text What does a PhD dissertation, privacy books, the color of orange, and biometric legislation have in common? No, this is not some lame joke, but there is one of those in the episode. This week on Serious Privacy , Paul Breitbarth and K Royal present one of their back porch / kitchen table conversations. The episode may be slightly messy. It might be slightly longer than you are used to, but a lot of updates are covered since it's been so long since one of these episodes given ...
Nov 04, 2021•48 min•Season 2Ep. 38
Send us a text This week on Serious Privacy, Paul Breitbarth and K Royal revisit the Chinese Personal Information Protection Law that goes into effect just a few days after publication of this episode. K and I spoke about this law already in episode 30 of this season, dated 31 August, as well as during our webinar on 15 September. However, questions keep flooding in, so we decided to record a follow up episode. The guidance coming out of China is still limited, although it seems the Cyberspace A...
Oct 28, 2021•46 min•Season 2Ep. 37
Send us a text In this episode of Serious Privacy , Paul Breitbarth and K Royal connect with Jocelyn Paulley , Partner at Gowling WLG in London and Lindsey Schultz , Senior Counsel at Global Privacy for Visa. This episode is a preview of a session that Jocelyn, Lindsey, and K are presenting on along with Chris Oates , a partner at Gowling WLG in Toronto on Privacy Compliance in the AdTech Industry at the Association of Corporate Counsel 's Annual meeting of 2021 . Increasingly, advertising ...
Oct 20, 2021•36 min•Season 2Ep. 36
Send us a text In this episode of Serious Privacy, Paul Breitbarth and K Royal hosted Carolin Lynch , the founder and owner of Copper Hill Strategies , has fifteen years of experience on the U.S. Capitol Hill, including a decade with the House Judiciary Committee where she served for eight years as the Chief Counsel of the Subcommittee on Crime, Terrorism, Homeland Security, and Investigations. As Chief Counsel, Caroline was at the forefront of developing some of the most high-profile privacy, c...
Oct 06, 2021•37 min•Season 2Ep. 35
Send us a text This week on Serious Privacy, K Royal presents her vacation episode. You’ve had to wait for it a little while, because of all the recent news and developments, but here it is: privacy at home. K has a long conversation with her husband, Tim Foley, about how living with a privacy professional has influenced their life together, as well as the education of K’s children. Furthermore, they talk about passwords, movies and series that involve privacy and much more. Oh, and we have some...
Sep 29, 2021•48 min•Season 2Ep. 34
Send us a text In this episode of Serious Privacy, Paul Breitbarth and K Royal discuss another fascinating privacy enhancing technology (PET) where individuals control their personal data. Yes, individuals control it. We met with Markus Lampinen , the co-founder and CEO of Prifina , which focuses on building an open data market, where individuals gain value from their data and developers get democratized data access. Developers are able to work with large amounts of data, such as that from perso...
Sep 22, 2021•43 min•Season 2Ep. 33
Send us a text On this week of Serious Privacy, Paul Breitbarth and K Royal connect with Romain Robert , is the program director and a senior lawyer for noyb , actively participating in their research and litigation strategy. Romain is also a member of the litigation chamber of the Belgian Data Protection Authority and previously worked as legal advisor for both the Belgian DPA and European Data Protection Supervisor . The name Max Schrems should be familiar. And also noyb - an acronym for None ...
Sep 15, 2021•47 min•Season 2Ep. 32
Send us a text In this episode of Serious Privacy, Paul Breitbarth and K Royal meet up with humanID , a non-profit and open source project, supported by Mozilla and Harvard University . Looking at their website, this is a great example of privacy by design and PET (privacy enhancing technology). Our guests, Bastien Purrer and Namik Muduroglu, are working on a solution they claim offers “an anonymous, bot-resistant authentication for safer online communities.” Why? So people can engage in open, h...
Sep 08, 2021•39 min•Season 2Ep. 31
Send us a text On this week of Serious Privacy, Paul Breitbarth and K Royal discuss the new China Personal Information Protection Law (PIPL) that was adopted on 20 August. This new omnibus data protection law will enter into force on 1 November 2021, without a transition period to comply. 73 days between adoption and entry into force is a very short deadline for compliance, especially for a wide-ranging and complex law such as the PIPL. Although many details remain unclear for the time being, du...
Aug 31, 2021•38 min•Season 2Ep. 30
Send us a text Gone are the days when you had to line up at a physical store to purchase a set of disks with the latest software. Nowadays, you just go to an online app store and download what you need, or even easier: just subscribe via a website and start using the software in your computer browser: Software as a Service, or SaaS. And that is exactly what Paul and K are talking about today. K will soon be speaking on a panel for the Association of Corporate Counsel 2021 Annual Meeting , togeth...
Aug 25, 2021•38 min•Season 2Ep. 29
Send us a text On this week of #SeriousPrivacy, Paul Breitbarth and K Royal discuss the summer news. From a major GDPR fine ( CNIL , WSJ , LQDN ), to a tech company planning to monitor smartphones for child pornography ( WaPo , IAPP ), and from CCPA enforcement in California to cookie consent banner complaints ( noyb ), it is all discussed during this episode. If you want to stay up-to-date on a daily basis of all the privacy news and its implications for global data protection compliance, why n...
Aug 18, 2021•42 min•Season 2Ep. 28
Send us a text This week, #SeriousPrivacy is in summer mode, with a special episode from the borders of Lake Geneva in Switzerland. Paul Breitbarth had the opportunity to speak to Massimo Marelli , Head of the Data Protection Office of the International Committee of the Red Cross and the Red Crescent (ICRC). Massimo is one of the authors of the Handbook on data protection in humanitarian action , and leading the various efforts of the ICRC to meet data protection standards both at headquarters a...
Aug 11, 2021•34 min•Season 2Ep. 27
Send us a text On this week of #SeriousPrivacy, Paul Breitbarth and K Royal meet up with Tash Whitaker , who is an outsourced DPO as a service. Not all organizations have the capability to organise the DPO role in house. Maybe they are too small, or they are just lacking the right people or qualifications to take on the role. For those companies, the outsourced DPO is a great option to consider. A year after the entry into force of GDPR, the IAPP estimated that already some 500.000 organisations...
Aug 04, 2021•38 min•Season 2Ep. 26
Send us a text On this week of #SeriousPrivacy, Paul Breitbarth and K Royal met with Emerald de Leeuw, Global Head of Privacy at Logitech . She has a wealth of experience in the tech markets, being an entrepreneur, and a high-level executive in a global and male-dominated field. In this episode, we want to leverage her experience in coming into a company and what do you focus on first? Do you do a risk assessment, meet the key players, review the policies, what? Where do you start? Along the way...
Jul 21, 2021•45 min•Season 2Ep. 25
Send us a text On this week of #SeriousPrivacy, Paul Breitbarth and K Royal covered a broad range of privacy developments along with responding to questions from listeners. New developments includ the new Colorado Privacy Act, SB21-190 . Signed by Governor Jared Polis on July 7, it is now the third state omnibus privacy law in the US, with Virginia having passed the Consumer Data Protection Act (CDPA) earlier this year and of course, the Calfornia Consumer Privacy Act (CCPA). We have a 4 part se...
Jul 14, 2021•41 min•Season 2Ep. 24
Send us a text On 28 June 2021, the European Commission announced it has approved two adequacy decisions for the United Kingdom (UK). With these decisions, one under the General Data Protection Regulations (GDPR) and one under the European law enforcement directive, the Commission confirms the UK offers a level of data protection that is essentially equivalent to that in the European Union (EU). With this hurdle out of the way, personal data can continue to flow freely from the EU to the UK, wit...
Jul 07, 2021•43 min•Season 2Ep. 23
Send us a text On this week of #SeriousPrivacy, Paul Breitbarth and K Royal discuss the potential new law for Colorado, the Colorado Privacy Act, SB21-190 . On June 8, it was passed by the House, meaning it is now ready for the governor’s signature. If it passes, it will be the third state omnibus privacy law in the US, with Virginia having passed the Consumer Data Protection Act (CDPA) earlier this year and of course, the California Consumer Privacy Act (CCPA). In this episode, we cover element...
Jun 30, 2021•30 min•Season 2Ep. 22
Send us a text On 21 June 2021, the European Data Protection Board (EDPB) released the long-awaited updated Recommendations on possible supplementary measures when transferring personal data out of the European Economic Area (EEA). These Recommendations align with the new Standard Contractual Clauses for International Transfers that were released by the European Commission on 4 June 2021 and require organisations to conduct third country risk assessments before transferring personal data. In thi...
Jun 23, 2021•43 min•Season 2Ep. 21
Send us a text On this week of #SeriousPrivacy, Paul Breitbarth and K Royal connect with Representative Domingo DeGrazia , of the Arizona House of Representatives to discuss the privacy legislation he has proposed (HB 2865) , but which has not gained significant ground in Arizona. He is a licensed attorney, has professional experience in aerospace and computers, and is a Certified Information Privacy Professional / US through the International Association of Privacy Professionals. This was his t...
Jun 16, 2021•42 min•Season 2Ep. 20
Send us a text On this week's episode of #SeriousPrivacy, Paul Breitbarth and K Royal discuss the new Standard Contractual Clauses (SCCs) for international transfers that were adopted by the European Commission on 4 June 2021. These model contracts, that come in four modules, finally replace the old SCCs, some of which date back to the early 2000s. The modernised versions are fully GDPR compliant, embrace the accountability principle and include many requirements to address the limitations ...
Jun 08, 2021•48 min•Season 2Ep. 19
Send us a text On this week of #SeriousPrivacy, Paul Breitbarth and K Royal connect with Dr. Eric Cole , on the release of his new book today Cyber Crisis - Protecting Your Business from Real Threats in the Virtual World . Fascinating insight, especially given the Colonial Pipeline incident recently, but a book that is not intended to be fairytales and happily-ever-afters. Dr. Cole holds a master’s degree in computer science from New York Institute of Technology and a doctorate from Pace Univers...
Jun 01, 2021•43 min•Season 2Ep. 18
Send us a text On this week of #SeriousPrivacy, Paul Breitbarth and K Royal discuss the European Union’s General Data Protection Regulation , because three years ago from the day this episode was released (May 25, 2021), the GDPR went into effect. And whether you consider it three years or or five ( per this Twitter debate ), it was a world-changing event. In this episode, they talk about the changes seen in the past three years, including the two years before that when the GDPR was passed. They...
May 25, 2021•39 min•Season 2Ep. 17
Send us a text On this week of #SeriousPrivacy, Paul Breitbarth and K Royal connect with Ray Everett , Founding Member & Chief Privacy Intelligence Officer at Data Secrets , a company that develops solutions focused on identifying risk wherever applications are accessing your data -- in the public cloud, in SaaS applications, and on-premise. He has a long history working as a privacy professional, including at TrustArc , and was appointed as the first Internet-era Chief Privacy Officer in 19...
May 20, 2021•40 min•Season 1Ep. 16
Send us a text In this episode of Serious Privacy, Paul Breibarth and K Royal connect with the Global Privacy Officer at GameStop , Seán Dunne . He really knows the company well, given that he started in retail operations almost 12 years ago. Now, he is responsible for global data protection compliance with laws ranging from the familiar GDPR and CCPA , to the less well known Canadian anti-spam legislation , and the privacy laws of Australia and New Zealand . This is quite the perspective to sha...
May 12, 2021•41 min•Season 2Ep. 15
Send us a text Every year, in the final week of January, privacy professionals from around the world assemble in the north of Brussels for the Computers, Privacy and Data Protection Conference . In recent years, on the final day, the European Data Protection Law Review awards a young scholar award and hosts a panel to discuss the nominated papers. In this episode of Serious Privacy, Paul Breibarth and K Royal host the third of this year’s three finalists for the EDPL Award. Please join us for a ...
May 05, 2021•38 min•Season 2Ep. 14
Send us a text In this episode of Serious Privacy, Paul Breibarth and K Royal tackle the slew of development (or non-developments) in privacy around the world. What a week in privacy! We had the proposal for AI Regulation published in the EU , the UK adequacy opinion, and of course, several privacy bills in states around the US, and the United States Supreme Court decision in AMG Capital Management, LLC et al. v. Federal Trade Commission , decided the morning of the episode recording. The AI pro...
Apr 28, 2021•40 min•Season 2Ep. 13
