Iapp Privacy Pro Podcast

As a consumer, it can be really difficult to figure out who's tracking your data online. Many companies hide behind algorithms claiming they're the "secret sauce" to their business model, which sometimes frustrates regulators and laymen alike. That's why award-winning journalist Julia Angwin and investigative journalist Surya Mattu, both of the non-profit news organization The Markup, recently developed and released Blacklight, a web site that allows users to scan any site for potential privacy violations, including what's being tracked and who's sharing your personal data. In this episode of The Privacy Advisor Podcast, Angwin and Mattu talk about the tool and why the team is passionate about user empowerment. 

There have been no shortage of hearings in the last couple of years on potential federal privacy legislation in the U.S. This week was no exception, as the U.S. Senate Committee on Commerce, Science and Transportation held another. But this hearing was under different circumstances, namely, it was held in the middle of the COVID-19 global pandemic. That garnered some conversation about the need for a comprehensive law more than ever, as did the release this week of the SAFE Data Act, which consolidates previously released legislation into one bill, with some nuance. In this episode of the podcast, IAPP Senior Research Fellow Muge Fazlioglu discusses the bill's provisions, and Sara Collins of Public Knowledge discusses how that featured into this week's hearing. 

As children around the globe either head back to school or continue their school year, depending on geolocation, many new privacy and data protection concerns present themselves. Whether it be heightened data collection on student health to prevent the spread of COVID-19 at school or new technologies implemented to facilitate virtual learning, there are all sorts of new unprecedented risks. In this episode of The Privacy Advisor Podcast, former White House Senior Advisor for Privacy Marc Groman and the Future of Privacy Forum's Director of the Education Privacy Project Amelia Vance discuss how we can help protect children's privacy — and whose job that is. 

If Brazil gave birth to its data protection law this week, it was a really fast labor.  Privacy professionals awoke to the news Thursday that overnight, in an unprecedented move, the Brazilian Senate approved an amendment allowing the General Personal Data Protection Law to go into effect (almost) immediately. The decision reverses a vote Tuesday to delay the implementation of the LGPD to Dec. 31, 2020. How could this have happened? What does it mean for those covered by the law? In this episode of The Privacy Advisor Podcast, Dirceu Santa Rosa talks to Angelique Carson, CIPP/US, about why there's some fear surrounding the news. 

In a highly anticipated decision, Europe's highest court decided July 16 that the EU-U.S. Privacy Shield agreement is invalid. The ruling will impact thousands of companies who'd used Privacy Shield to transfer data from the EU to the U.S. Additionally, the court decided to uphold another data transfer mechanism, standard contractual clauses, but with conditions. The news is a game-changer and casts much uncertainty upon the stability of cross-border agreements. In this episode of The Privacy Advisor Podcast, IAPP Research Director Caitlin Fennessy, Hintze Law's Susan Lyon-Hintze and Future of Privacy Forum's Gabriela Zanfir-Fortuna discuss the decision and what privacy pros should be thinking about in the coming days and weeks.   

There's no shortage of tech companies and apps aiming to help thwart the spread of COVID-19, in addition to government efforts. But with so many different apps being deployed and so much sensitive data being swept up, is this one of those moments in time that we're putting safety ahead of privacy in ways that can't be undone? In this episode of The Privacy Advisor Podcast, the Future of Privacy Forum's Polly Sanderson and the International Digital Accountability Council's Quentin Palfrey discuss both the apps themselves as well as the greater ecosystem surrounding contact tracing. 

Recently, Jay Edelson and his team at Edelson PC have filed three different class-action lawsuits related to unwanted surveillance: One against security company ADT, one against a Chicago hospital and another against biometric start-up Clearview AI. In this episode of The Privacy Advisor Podcast, Edelson talks about why he chose to file the suits and why he thinks they're important cases for privacy rights generally. He also talks about the status of his firm's historic settlement with Facebook over violations of Illinois biometric privacy law. 

When the world was turned upside down with the COVID-19 pandemic and then the murder of George Floyd in the U.S., any momentum we’d started to see on passing a federal privacy bill was lost — at least temporarily. But Cam Kerry is aiming to change that by re-igniting bi-partisan conversations with a report proposing how we might overcome the impasse we've found ourselves at in two crucial areas: federal pre-emption and a private right of action. In this episode of The Privacy Advisor Podcast, Kerry discusses how to bridge the divide. 

There is so much privacy news related to the pandemic lately that it sometimes feels like that's the only news. But the world continues to spin, if more quietly, as most of its population works from the comfort of their homes. In this episode of The Privacy Advisor Podcast, Angelique Carson chats with Brussels-based freelance journalist Jennifer Baker about two government data breaches, the latest on activist Max Schrems and his complaints, as well as recent criticisms on the level of DPA enforcement now that the GDPR has turned two.

Especially now, while most of us are stuck indoors hiding from the invisible monster that is the COVID-19 disease, it's not difficult to imagine better days — days when we can safely travel again to faraway islands with blue-glass waters and sandy beaches. Or, you could do what Alex White did and move there. The former deputy chief privacy officer of South Carolina didn't move to the island for a vacation, though. He took the job as the country's first-ever privacy commissioner, a position created with the passage of Bermuda's privacy law in 2016. In this episode of The Privacy Advisor Podcast, White talks to host Angelique Carson, CIPP/US, about the challenges of starting up a new office — especially in the midst of a global pandemic — and why he thinks privacy professionals should think of themselves as, of all things, GPS devices. 

The EU General Data Protection Regulation ushered in an enhanced private right of action for violations of the law, both for material and non-material damages. Attorneys say there's now a significant uptick in cases brought alleging such a grievance has occurred, and that they're often brought as a "follow-on" to data protection authorities' own investigations. In this episode of The Privacy Advisor Podcast, Orrick attorneys Keily Blair and James Lloyd, both based in the U.K., describe the uptick in civil litigation claims they're seeing and the ways that's changing things — including how companies interact with data protection authorities. 

It's a troubling and weird time to be alive. The headline are dominated by reports of mass death and despair globally, and we're all trapped at home trying to cope with a very new and very difficult reality. In a time like this, it can feel hard to find meaning in the day-to-day work of being a privacy professional. In this fireside-chat style podcast, IAPP Editor Angelique Carson, CIPP/US, talks with three DC-based privacy professionals -- who happen to also be three of her best friends -- about how they're coping and staying focused on their individual missions. 

Telecommunications companies across the world, including in Germany, Brazil and China have granted their governments access to customers' cellphone data in an effort to help track the COVID-19. Other countries are more cautious; the Dutch DPA called for emergency legislation before sharing occurs, and Canadian Prime Minister Justin Trudeau has said a flat no, for now. In this episode of The Privacy Advisor Podcast, Heather Federman, vice president of privacy and policy at BigID, discusses the potential longterm implications of location data agreements and the role privacy officers should play in board room discussions on sharing customer data. 

It's a scary time by any standard. There's news every day about the latest number of those infected by an invisible danger that'll make some sick and kill others and to stay safe we have to stay away from each other in a time when we most need each other for support. And when we're scared, sometimes we make decisions based on fear. In this episode of The Privacy Advisor Podcast, Michelle De Mooy of DeMOOY Consulting and former director of privacy and data at the Center for Democracy and Technology, talks about the data privacy concerns related to private-public entities partnering up to address the health crises COVID-19 has presented. 

If there's anyone we could call an expert on data protection in the EU, it's Christian D'Cunha. Years back, he was charged with leading the review of the EU Data Retention Directive — no easy task — before he moved to a role at the European Data Protection Supervisor's office as a policy assistant under former EDPS Peter Hustinx and then, his successor, the late Giovanni Buttarelli. Now, D'Cunha has taken a role at the European Commission at DG Connect, a segment of the Cybersecurity and Digital Privacy Unit. In this episode of The Privacy Advisor Podcast, D'Cunha discusses what he learned about the art of negotiation during his leadership role on the Directive, the future of ethics in the privacy profession and whether we're ever going to see that ePrivacy Regulation come to fruition.

February 19, the European Commission released its EU data strategy. As the IAPP's Riyan Chiavetta reported, the document outlines the commission’s five-year plan for “policy measures and investments to enable the data economy.” The commission based its strategy on four pillars, one of which is a cross-sectoral governance framework for data access and use. In conjunction with the release data strategy, the commission also published a white paper on AI. In this episode of The Privacy Advisor Podcast, the Future of Privacy Forum's Gabriela Zanfir-Fortuna, who's expertise on moves by the European government is exceptionally informed, discusses the new releases and whether they'll have a meaningful impact or if they're lofty, abstract goals.

In January, the U.K. Information Commissioner's Office released its proposed "Age Appropriate Design Code" aimed at protecting children's privacy online. The code, which will require parliamentary approval, outlines 15 standards online services should follow. It also provides guidance on data protection safeguards aimed at ensuring online services are appropriate for children's use. In this episode of The Privacy Advisor Podcast, Playwell's Linnette Attai talks to host, Angelique Carson, CIPP/US, about what the code means for companies who cater to children, and even more importantly, those who traditionally haven't but may be covered under the new rules. 

It would've been hard to miss the big news this week, news privacy advocates are heralding as a major win: Facebook has agreed to settle for $550 million in a class-action lawsuit alleging the company violated Illinois' biometric privacy law when it used facial recognition software to suggest users "tag" faces in photos they'd uploaded to the site. In this episode of the podcast, Jay Edelson, one of the plaintiff's attorneys who argued the case, talks about why he's "enormously proud" of what is " easily the largest cash privacy settlement in our nation's history" and why this is a good settlement for members of the class. 

Jan. 15, Washington State Legislature's Senate Environment, Energy & Technology Committee held its first public hearing on a reintroduced version of the Washington Privacy Act. Those who've been following developments on the state's privacy legislation will recall that last year, despite gaining some significant momentum, the bill failed. The new version of the bill has gained praise from many privacy advocates, and lawmakers in Washington have said the bill has significant bi-partisan support. But Jevan Hutson and Jennifer Lee, who both testified at Wednesday's hearing, have concerns that the bill fails to protect consumers in a number of ways. In this episode of the podcast, Hutson and Lee discuss what happened at the hearing and why they're not convinced this bill represents comprehensive privacy reform. Full Story

Anyone who's been in the privacy game for a minute will likely tell you 2019 was one of the most exciting — and stressful — years on the books. Regulatory and enforcement action, the mad dash to comply with the California Consumer Privacy Act and continuing efforts to operationalize GDPR-compliant programs were just a fraction of the news privacy professionals had to track this year in order to do their jobs well. The good news? That made for plenty of fodder for The Privacy Advisor Podcast. In this last episode of the 2019 season, five of the year's best-rated guests, according to you, talk about the pitfalls of 2019 and — more importantly — the essential developments they're tracking as 2020 approaches.