Serious Privacy

Send us Fan MailIn this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool take some time to review recent events in the privacy / data protection world. This week, this means they cover the Connecticut Act concerning Personal Data Privacy and Online Monitoring Act - the PDPOM… Paul has a cool name for it. Connecticut’s act passed on May 10, 2022 and takes effect July 1, 2023 - along with CPRA and Virginia on January 1, 2023; Colorado also on July 1, 2023; Utah on December 31, 2023  Please also see the recent state laws webinar from TrustArc and the state whitepapers.This leads into the Roe v. Wade US Supreme Court leaked draft decision and then on to Europe with a study conducted  by the  Radboud University in the Netherlands, imec-COSIC, KU Leuven (a Catholic research university in the city of Leuven, Belgium), and University of Lausanne in Switzerland. These researchers looked at thousands of websites and their “leaky forms.” Leaky forms are those that capture data before the individual submits it, so companies get a lot of data that they should not have, including passwords. This may not be purposeful, but it is concerning. The full paper is published here.As always, if you have comments or questions, let us know - LinkedIn, Twitter @podcastprivacy @euroPaulB @heartofprivacy @trustArc and email seriousprivacy@trustarc.com. Please do like and write comments on your favorite podcast act so other professionals can find us easier.  If you have comments or questions, find us on LinkedIn and Instagram @seriousprivacy, and on BlueSky under @seriousprivacy.eu, @europaulb.seriousprivacy.eu, @heartofprivacy.bsky.app and @igrobrien.seriousprivacy.eu, and email podcast@seriousprivacy.eu. Rate and Review us! From Season 6, our episodes are edited by Fey O'Brien. Our intro and exit music is Channel Intro 24 by Sascha Ende, licensed under CC BY 4.0. with the voiceover by Tim Foley.

Send us Fan MailIn this episode of Serious Privacy, Paul Breitbarth  and Dr. K Royal connect with Victoria Beckman, the lead over Microsoft Digital Crimes Unit for the Americas and an award-winning woman in cybersecurity. Victoria is a former law student of K’s at the Sandra Day O’Connor College of Law at Arizona State University and they both wound up in privacy-related fields. Of course, Victoria’s route to her current role was quite indirect, including a background in engineering.We focus on a recent special report by Microsoft on the cyberwarfare being conducted in the Ukraine by Russia, aloing with Microsoft’s annual digital defense report, the last one issued in 2021. Join us as we discuss these hot topics, along with data protection basics, such as passwords (as also discussed by K and her husband Tim in episode 34 in season 2) and phishing attacks. As always, please feel free to reach out to us at seriousprivacy@trustarc.com or on LinkedIn for Serious Privacy and TrustArc (as well as Paul and Dr. K). You can reach us on Twitter @TrustArc @PodcastPrivacy @EuroPaulB and @HeartofPrivacy. Please also rate and review us in your favorite podcast app and share us with your friends.  If you have comments or questions, find us on LinkedIn and Instagram @seriousprivacy, and on BlueSky under @seriousprivacy.eu, @europaulb.seriousprivacy.eu, @heartofprivacy.bsky.app and @igrobrien.seriousprivacy.eu, and email podcast@seriousprivacy.eu. Rate and Review us! From Season 6, our episodes are edited by Fey O'Brien. Our intro and exit music is Channel Intro 24 by Sascha Ende, licensed under CC BY 4.0. with the voiceover by Tim Foley.

Send us Fan MailIn this episode of Serious Privacy, Paul Breitbarth introduces an episode where Dr. K Royal caught up with several individuals at the IAPP Global Privacy Summit held in Washington DC at the Marriott Marquis. It was a truly wonderful event, the first Global privacy Summit since 2019, with thousands of privacy professionals in attendance. Attendees included professionals from all over the world, those with nonprofits, with private companies, with start-up companies, government representatives, in-house and outside firm attorneys, security professionals, regulators, and more!Join us to listen to snippets of conversation with some people you may know and some you may not. Featured in this episode are Trevor Hughes, CEO of the IAPP, Eduardo Ustaren of Hogan Lovells, David Cohen of IAB, Emil Ochotta with Google, Jörn Wittmann and Gabriela Mercuri with Scope Europe, and ShanShan Pa now with State Street. Although K Intended to include short snippets from some truly world class keynote speakers and some of the sessions that she attended, the sound quality just wasn't good enough to be able to add them. We're pretty sure the IAPP will include some recordings but if they don't - just know if you weren't there, you missed a really good conference.As always, please do rate and review us in your favorite podcast app - and if you let us know, we will send you a sticker! If you have comments or questions, find us on LinkedIn and Instagram @seriousprivacy, and on BlueSky under @seriousprivacy.eu, @europaulb.seriousprivacy.eu, @heartofprivacy.bsky.app and @igrobrien.seriousprivacy.eu, and email podcast@seriousprivacy.eu. Rate and Review us! From Season 6, our episodes are edited by Fey O'Brien. Our intro and exit music is Channel Intro 24 by Sascha Ende, licensed under CC BY 4.0. with the voiceover by Tim Foley.

Send us Fan MailThis episode of Serious Privacy, sponsored by TrustArc, heads south to Africa. Paul Breitbarth of Catawiki and Dr. K Royal of Outschool chat with Teki Akuetteh, the first Executive Director of the Ghana Data Protection Authority and current Chair of the Africa Digital Rights Hub.  The conversation covered quite a bit of ground, starting with how privacy has developed in Africa, cybersecurity, and how enforcement has grown demonstrating the advance of privacy in Africa as a whole, although some nations are a little more ahead than others.Topics touched on some countries, such as Ghana, South Africa, and Burkina Faso, alog with the awareness of data privacy in the public realm. Also, the role technology and telecoms in particular contribute to the need and the drive of data privacy.  Join us as we discuss Teki's experience in the developing tech world in Africa, the challenges and successes she has seen, and how she got into the field to begin with. As always, you can catch Serious Privacy in your favorite podcast app or listen to it straight from your device. Please do let us know what you think about the topics and what you might want to hear. Rate and review us - that always helps! and connect with us on LinkedIn or Twitter. @EuroPaulB @HeartofPrivacy @TrustArc @PodcastPrivacy. Remember to check for upcoming webinars and ask about Privacy Central from TrustArc. If you have comments or questions, find us on LinkedIn and Instagram @seriousprivacy, and on BlueSky under @seriousprivacy.eu, @europaulb.seriousprivacy.eu, @heartofprivacy.bsky.app and @igrobrien.seriousprivacy.eu, and email podcast@seriousprivacy.eu. Rate and Review us! From Season 6, our episodes are edited by Fey O'Brien. Our intro and exit music is Channel Intro 24 by Sascha Ende, licensed under CC BY 4.0. with the voiceover by Tim Foley.

Send us Fan MailOn this episode of Serious Privacy, sponsored by TrustArc, Paul Breitbarth and K Royal some with Angelique Carson. Angelique is currently with TerraTrue but Paul and K know her best from when she was with the IAPP, International Association of Privacy Professionals. Angelique had launched the IAPP's podcast years ago,  where K was one the very first guests.The conversation flows from podcasts with its challenges and triumphs to how the privacy profession has grown over the past decade. They also discussed how professionals, whether attorneys or not,  can enter the hottest growing field.  The barriers to entry aren't insurmountable, but being successful does require a certain perspective. And if you are looking for the GDPR website K was referring to - you'll find it here.Join us as we reminisce and review what it means to be in privacy,  the changes we've seen worldwide,  and our perspective on the state of this fascinating field.In addition,  K and Angelique are attending the IAPP's Global Privacy Summit in DC April 11 - 13. This is the first GPS in three years and it's sure to make history.As always, if you like the Serious Privacy podcast, tell everyone -rate and review us in your favorite podcast app. You will find us on LinkedIn and Twitter @podcastprivacy, along with TrustArc, K as @heartofprivacy and Paul as @EuroPaulB.  If you have comments or questions, find us on LinkedIn and Instagram @seriousprivacy, and on BlueSky under @seriousprivacy.eu, @europaulb.seriousprivacy.eu, @heartofprivacy.bsky.app and @igrobrien.seriousprivacy.eu, and email podcast@seriousprivacy.eu. Rate and Review us! From Season 6, our episodes are edited by Fey O'Brien. Our intro and exit music is Channel Intro 24 by Sascha Ende, licensed under CC BY 4.0. with the voiceover by Tim Foley.

Send us Fan MailIn the 100th episode of Serious Privacy, Paul Breitbarth and Dr. K Royal connect with two of the biggest names in the privacy field, Chris Babel, the CEO of TrustArc and Hilary Wandall, Chief Compliance Officer at Dun and Bradstreet. Both Chris and Hilary were instrumental in launching Serious Privacy and critical to its success.In this completely unscripted and candid conversation, the four of them touch on both philisophical aspects of privacy and practical application. No topic was off limits! They ranged from the replacement to Privacy Shield to the growth of privacy as a career to ESG. Join them for a rousing discussion - that goes a little longer than usual. And as a special treat, we also have an interview with Immaculate Kassait, the Data Commissioner of Kenya. Feel free to comment on Twitter (@podcastprivacy @trustarc @euroPaulB @heartofprivacy) or on LinkedIn for Serious Privacy your thoughts in response.Don't forget to catch K at IAPP Global Summit April 11 - 13 for stickers and spur-of-the-moment interviews and also register for upcoming TrustArc webinars. If you have comments or questions, find us on LinkedIn and Instagram @seriousprivacy, and on BlueSky under @seriousprivacy.eu, @europaulb.seriousprivacy.eu, @heartofprivacy.bsky.app and @igrobrien.seriousprivacy.eu, and email podcast@seriousprivacy.eu. Rate and Review us! From Season 6, our episodes are edited by Fey O'Brien. Our intro and exit music is Channel Intro 24 by Sascha Ende, licensed under CC BY 4.0. with the voiceover by Tim Foley.

Send us Fan MailOn this episode of Serious Privacy, Paul Breitbarth of Catawiki and Dr. K Royal of Outschool review what might seem to be small events in privacy developments, but are really robust once reviewed. They touch on a spotify case in Barcelona, the Spanish Data Protection Commissioner search on hold, and events in Belgium. In addition, on the US side, a DC judge ruled that Mark Zuckerberg could not be added to the Cambridge Analytica case personally.At the same time, the Irish DPC entered the first Article 60 review and issued Facebook a $17M fine.  The DPC is also facing a lawsuit by the Irish Council for Civil Liberties. Meanwhile, the New York police department is facing a lawsuit for its massive DNA database that they have collected over the years. Lastly, the Zoom DPIA by Sjoera Nas (please see the prior podcast with her on DPIA processes). Next week is our 100th episode. Tell us what you'd like to hear and thank you for being our friends!As always, if you like the Serious Privacy podcast, tell everyone -rate and review us in your favorite podcast app. You will find us on LinkedIn and Twitter @podcastprivacy, along with TrustArc, K as @heartofprivacy and Paul as @EuroPaulB.  If you have comments or questions, find us on LinkedIn and Instagram @seriousprivacy, and on BlueSky under @seriousprivacy.eu, @europaulb.seriousprivacy.eu, @heartofprivacy.bsky.app and @igrobrien.seriousprivacy.eu, and email podcast@seriousprivacy.eu. Rate and Review us! From Season 6, our episodes are edited by Fey O'Brien. Our intro and exit music is Channel Intro 24 by Sascha Ende, licensed under CC BY 4.0. with the voiceover by Tim Foley.

Send us Fan MailIn this episode of Serious Privacy, Paul Breitbarth and K Royal catch up with the renowned Kirk Nahra, co-chair of both the Big Data Practice and the Cybersecurity and Privacy Practice for WilmerHale.K and Kirk have known each other for years - mostly related to US healthcare law, long before Kirk won the IAPP Vanguard Award in 2021. They discuss the US Health Insurance Portability and Accountabilit  Act of 1996, along with its subsequent amendments, known as HIPAA. But they also discuss information blocking and protecting COVID-19 data in this current global environment, and the reputation of US privacy laws.Join us for a lively discussion of privacy, adult kids, and teaching privacy at US law schools. Kirk also talks about an insightful journal article he always references in his class. As always, if you like us - tell the world! You can find us on Twitter @podcastprivacy @trustarc @europaulb @heartofprivacy.  We're also on LinkedIn. We are coming up to our 100th episode, so let us know if you have any questions you'd like us to address. Register for the TrustArc Webinar How to Prepare Your Business for Privacy Changes in the Middle East & North Africa on March 29 at 9 am PST. If you have comments or questions, find us on LinkedIn and Instagram @seriousprivacy, and on BlueSky under @seriousprivacy.eu, @europaulb.seriousprivacy.eu, @heartofprivacy.bsky.app and @igrobrien.seriousprivacy.eu, and email podcast@seriousprivacy.eu. Rate and Review us! From Season 6, our episodes are edited by Fey O'Brien. Our intro and exit music is Channel Intro 24 by Sascha Ende, licensed under CC BY 4.0. with the voiceover by Tim Foley.

Send us Fan MailWe live in strange times that often remind us how important it is to live our lives in freedom and to enjoy our fundamental rights. This week on Serious Privacy, Paul Breitbarth and K Royal talk about the war in Ukraine, but also about a lot of data protection related developments around the world. Topics include the new privacy law that is awaiting the Governor’s signature in Utah, proposed changes to the Budapest Convention on Cybercrime and the response of the European Data Protection Board to it, new guidance on using codes of conduct to transfer personal data out of Europe, getting started in a new data protection role and more. As always, please feel free to share your thoughts with us. Follow us on LinkedIn as Serious Privacy and on Twitter @podcastprivacy @EuroPaulB and @HeartofPrivacy. ResourcesThe Utah Consumer Privacy ActThe Council of Europe Budapest Convention on CybercrimeSecond additional protocol to the Budapest ConventionEDPB response to the Second additional protocolEDPB guidelines on codes of conduct to transfer personal data If you have comments or questions, find us on LinkedIn and Instagram @seriousprivacy, and on BlueSky under @seriousprivacy.eu, @europaulb.seriousprivacy.eu, @heartofprivacy.bsky.app and @igrobrien.seriousprivacy.eu, and email podcast@seriousprivacy.eu. Rate and Review us! From Season 6, our episodes are edited by Fey O'Brien. Our intro and exit music is Channel Intro 24 by Sascha Ende, licensed under CC BY 4.0. with the voiceover by Tim Foley.

Send us Fan MailThis week on Serious Privacy, Paul Breitbarth and K Royal speak with Sjoera Nas. Sjoera is a long time privacy professional and privacy activist. She became involved with digital rights in the late 1990s and early 2000s, while working for the Dutch internet service provider XS4all, and later for civil rights group Bits of Freedom. But Sjoera is probably best known for her work at the Dutch Data Protection Authority, where she took the lead within the so-called Internet Team, leading investigations into anything that was happening online, from cookies and trackers, to interactive television, search engines, and picking long fights with ICANN on their WhoIs register and telco’s on data retention. Since four years, Sjoera is a consultant for Privacy Company, still based out of the Netherlands, but doing work with global impact. Together with her team, she writes extensive data protection impact assessments on a range of cloud services, like Office365, Google Workspace and Microsoft Sharepoint and OneDrive. Her customer: the Dutch government and higher education system, which surely helps when it comes to negotiating risk mitigation measures. During this episode, we talk at length about conducting technical deep dive DPIAs, that everyone can benefit from, and negotiating risk mitigating measures with Big Tech. But we also cover international transfers (remember those?) and Google Analytics alternatives.As always, please feel free to share your thoughts with us - therewill be a year end show on the best episodes. Get your vote counted! Follow us on LinkedIn as Serious Privacy and on Twitter @podcastprivacy @EuroPaulB and @HeartofPrivacy. ResourcesThe blog posts linked below contain the summaries of each of the DPIAs referred to during the podcast. Via the blog, you will also find the full DPIA document, including annexes, to read. Even though they are lengthy, we highly recommend reading and using them if your company uses any of these products.The Privacy Company blog Blog post about the DPIA for Microsoft Sharepoint, OneDrive and TeamsBlog post about the DPIA for Google WorkspaceBlog post about the DPIA for Office365Blog post about Google Analytics alternatives (in Dutch only)SLM Rijk (the Shared Service Center for the Dutch Government) DPIA Overview  If you have comments or questions, find us on LinkedIn and Instagram @seriousprivacy, and on BlueSky under @seriousprivacy.eu, @europaulb.seriousprivacy.eu, @heartofprivacy.bsky.app and @igrobrien.seriousprivacy.eu, and email podcast@seriousprivacy.eu. Rate and Review us! From Season 6, our episodes are edited by Fey O'Brien. Our intro and exit music is Channel Intro 24 by Sascha Ende, licensed under CC BY 4.0. with the voiceover by Tim Foley.