The International Association of Privacy Professionals is the largest and most comprehensive global information privacy community and resource, helping practitioners develop and advance their careers and organizations manage and protect their data. More than just a professional association, the IAPP provides a home for privacy professionals around the world to gather, share experiences and enrich their knowledge. Founded in 2000, the IAPP is a not-for-profit association with more than 70,000 ...
…
continue reading

1
Privacy in the age of robotics: A discussion with Erin Relford
36:48
36:48
Play later
Play later
Lists
Like
Liked
36:48Autonomous robots with embedded artificial intelligence are growing more common across industry sectors. So-called “embodied AI,” collects vast amounts of data through its sensors and changes how humans interact with technology. As embodied AI becomes more common and continues to drive innovation, it also creates new challenges for ethical uses of …
…
continue reading

1
On privacy and technology with Dan Solove
47:08
47:08
Play later
Play later
Lists
Like
Liked
47:08Privacy law and technological advancements have a deep and intertwined history that go back to at least the 1890s with Samuel Warren and Louis Brandeis's article "The Right to Privacy," which was prompted by camera technology. George Washington University Law Professor Dan Solove has long studied and written about privacy law. He published several …
…
continue reading

1
Regulating online safety: A chat with Australia eSafety Commissioner Julie Inman-Grant
37:24
37:24
Play later
Play later
Lists
Like
Liked
37:24Australia made waves in 2024 after it passed an amendment to the Online Safety Act of 2021, which introduces a legal minimum age of 16 to create and use an account for certain social media platforms in Australia. It also requires platforms within scope to implement age-gating practices. As Australia’s first eSafety Commissioner, Julie Inman-Grant, …
…
continue reading

1
US state AI legislation in 2025: A discussion with Connecticut State Sen. James Maroney
39:22
39:22
Play later
Play later
Lists
Like
Liked
39:22Though it came close in recent years, federal privacy legislation is not likely top of mind as a new administration takes the reigns in Washington, DC. The same likely goes for federal AI governance and safety legislation with a divided Congress and executive branch that promotes a deregulatory posture. That means state-level privacy and AI bills w…
…
continue reading

1
Digital policy 2024: A year in review with Omer Tene
41:57
41:57
Play later
Play later
Lists
Like
Liked
41:57It's hard to believe we’ve reached the final weeks of 2024, a year filled with policy and legal developments across the map. From the continued emergence of AI governance, to location privacy enforcement, children’s online safety to novel forms of privacy litigation, no doubt this was a year that kept privacy and AI governance pros very busy. One s…
…
continue reading

1
AI red teaming strategy and risk assessments: A conversation with Brenda Leong
37:41
37:41
Play later
Play later
Lists
Like
Liked
37:41AI governance is a rapidly evolving field that faces a wide array of risks, challenges and opportunities. For organizations looking to leverage AI systems such as large language models and generative AI, assessing risk prior to deployment is a must. One technique that’s been borrowed from the security space is red teaming. The practice is growing, …
…
continue reading

1
Presidential election 2024: Where the candidates stand on privacy and AI governance policy
38:51
38:51
Play later
Play later
Lists
Like
Liked
38:51As the U.S. enters the final stretch of the 2024 election cycle, we face a tight race at the presidential and congressional levels. With a razor-thin margin separating Vice President Kamala Harris and former president Donald Trump, we decided to take a look at the possible policy positions of each campaign with regard to privacy and artificial inte…
…
continue reading

1
2024 in US state privacy law: A retrospective with Keir Lamont and David Stauss
46:16
46:16
Play later
Play later
Lists
Like
Liked
46:16The year 2024 proved to be another robust one for emerging U.S. state privacy law. Seven states joined the ranks, bringing the total up to 19. Unlike previous years, however, 2024 underwent a paradigm shift away from the standard framework influenced by the draft Washington State Privacy Act. For the Future of Privacy Forum's Keir Lamont, CIPP/US, …
…
continue reading

1
Assessing AI's risks and impacts: A conversation with NIST's Reva Schwartz
27:30
27:30
Play later
Play later
Lists
Like
Liked
27:30In May 2024, the U.S. National Institute for Standards and Technology launched a new program called ARIA, which is short for Assessing Risks and Impacts of AI. The aim of the program is to advance sociotechnical testing and evaluation of artificial intelligence by developing methods to quantify how a given system works within real-world contexts. P…
…
continue reading

1
Privacy litigation trends: A discussion with Darren Abernethy
45:16
45:16
Play later
Play later
Lists
Like
Liked
45:16With the proliferation of comprehensive U.S. state privacy laws in recent years, there’s been an understandable focus by privacy professionals on this growing patchwork. But privacy litigation is also on the rise and the plaintiff’s bar has explored some novel theories, particularly around the use of onlin tracking technologies. Greenberg Traurig S…
…
continue reading

1
Inside the EU AI Act negotiations: A discussion with Laura Caroli
50:14
50:14
Play later
Play later
Lists
Like
Liked
50:14For many of us following along with the EU AI Act negotiations, the road to a final agreement took many twists and turns, some unexpected. For Laura Caroli, this long, complicated road has been a lived experience. As the lead technical negotiator and policy advisor to AI Act co-rapporteur Brando Benefei, Caroli was immersed in high stakes negotiati…
…
continue reading

1
Top trends in cybersecurity: A chat with James Dempsey and John Carlin
1:07:55
1:07:55
Play later
Play later
Lists
Like
Liked
1:07:55In tandem with privacy, cybersecurity law is rapidly evolving to meet the needs of an increasingly digitized and complex economy. To help practitioners keep up with this ever-changing space, the IAPP published the first edition of Cybersecurity Law Fundamentals in 2021. But there have been a lot of developments since then. Cybersecurity Law Fundame…
…
continue reading

1
Regulating AI in the UK: A discussion with Lord Holmes
22:05
22:05
Play later
Play later
Lists
Like
Liked
22:05For those following the regulation of artificial intelligence, there is no doubt passage of the AI Act in the EU is likely top of mind. But proposed policies, laws and regulatory developments are taking shape in many corners of the world, including in Australia, Brazil, Canada, China, India, Singapore and the U.S. Not to be left behind, the U.K. he…
…
continue reading

1
Privacy and data protection in 2023: A year in review with Joe Jones
31:13
31:13
Play later
Play later
Lists
Like
Liked
31:13Hard to believe we’re at the twilight of 2023. For those following data protection and privacy developments, each year seems to bring with it a torrent of news and developments. This past year was no different. The EU General Data Protection Regulation turned five, and the Snowden revelations turned 10. From a finalized EU-US Data Privacy Framework…
…
continue reading

1
Luca Bertuzzi on the EU AI Act political deal and what's next
35:32
35:32
Play later
Play later
Lists
Like
Liked
35:32After a gruelling trilogue process that featured two marathon negotiating sessions, the European Union finally came to a political agreement 8 December on what will be the world’s first comprehensive regulation of artificial intelligence. The EU AI Act will be a risk-based, horizontal regulation with far-reaching provisions for companies and organi…
…
continue reading

1
Martin Abrams: A look back at a career in information privacy and consumer policy
51:06
51:06
Play later
Play later
Lists
Like
Liked
51:06Martin Abrams knows a little something about information privacy and consumer policy. Over the course of the last 40-plus years, Abrams has had his hands in a number of initiatives, including as co-founder and president of the Center for Information Policy Leadership and founder of the Information Accountability Foundation. He took part in the deve…
…
continue reading

1
EU policymakers discuss the EU AI Act negotiations at DPC23
42:17
42:17
Play later
Play later
Lists
Like
Liked
42:17The EU AI Act negotiations recently hit a major roadblock after EU Council Member States France and Germany unexpectedly pushed back on the European Parliament's draft position on regulating foundation models. The obstacle was so sudden, it appeared the negotiations were in a stalemate. Though the issue has not yet been fully resolved, the Spanish …
…
continue reading

1
Catching up with the co-author of the White House Blueprint for an AI Bill of Rights
40:29
40:29
Play later
Play later
Lists
Like
Liked
40:29As automated systems rapidly develop and embed themselves into modern life, policy makers around the world are taking note and, in some cases, stepping in. Earlier this year, the Biden-Harris administration took an early step by releasing a Blue Print for an AI Bill of Rights. Comprising five main principles, as well as what should be expected of a…
…
continue reading

1
Assessing the Snowden revelations 10 years later
46:14
46:14
Play later
Play later
Lists
Like
Liked
46:14In June 2013, a series of high-profile U.S. government surveillance disclosures to major media outlets rippled throughout the world and changed the calculus for the privacy profession. Hard to believe it's now been 10 years since an unknown U.S. government contractor leaked to the world massive amounts of information about top secret U.S. intellige…
…
continue reading

1
The ins and outs of workplace privacy law: A chat with Zoe Argento
49:06
49:06
Play later
Play later
Lists
Like
Liked
49:06We often focus on consumer policy when discussing privacy laws and obligations, but companies must protect their employee data, as well. Navigating complex employee privacy and labor laws in the U.S., for example, can be challenging, and new state laws, like the California Privacy Rights Act, apply more pressure on privacy pros charged with ensurin…
…
continue reading

1
NIST's Reva Schwartz on the new AI Risk Management Framework
41:06
41:06
Play later
Play later
Lists
Like
Liked
41:06The prospect of day-to-day life with artificial intelligence is no longer a future endeavor. AI systems comprise countless applications across public and private organizations, and through open-sourced systems, such as ChatGPT, AI is now consumer-facing and usable. The U.S. National Institute of Standards and Technology was directed by the National…
…
continue reading

1
Top takeaways from the FTC-GoodRx case: A chat with Kirk Nahra
34:40
34:40
Play later
Play later
Lists
Like
Liked
34:40In early February, the U.S. Federal Trade Commission published a proposed order that fines telehealth and discount prescription provider GoodRX $1.5 milllion. Though part of the case involves deception – one of two prongs under the FTC Act – the case also raises the first-of-its-kind use of the Health Breach Notification Rule. To help better unders…
…
continue reading

1
A look at privacy developments in 2023 with Omer Tene
40:22
40:22
Play later
Play later
Lists
Like
Liked
40:22Without a doubt, 2022 was a packed year for privacy-related news and developments. But according to Goodwin Partner and IAPP Westin Emeritus Senior Fellow Omer Tene, 2023 is set to call and raise the stakes. To be sure, 2023 didn’t hesitate. On Jan. 4, just a few days before we sat down for our interview, the Irish Data Protection Commission levied…
…
continue reading

1
All things 'California Privacy Law' with Lothar Determann
48:14
48:14
Play later
Play later
Lists
Like
Liked
48:14California has long led the way on many privacy-related laws, going back to at least 2002 when it passed the first data breach notification law in the U.S. More recently, passage of the California Consumer Privacy Act and the California Privacy Rights Act has prompted other states to follow suit. Baker McKenzie Partner Lothar Determann has long pra…
…
continue reading

1
Operationalizing data subject rights: How Consumer Reports is aiming to help
30:33
30:33
Play later
Play later
Lists
Like
Liked
30:33With the rise of data subject rights in privacy law, privacy practitioners are often challenged with operationalizing what can be a complex and risky endeavor. California, through the CCPA and CPRA, has emerged as a leader on this in the United States. Advocacy organization Consumer Reports has not only been working on policy with states like Calif…
…
continue reading

1
The EU AI Act: A discussion with MEP and Co-rapporteur Dragoș Tudorache
54:03
54:03
Play later
Play later
Lists
Like
Liked
54:03Nearly five years after the implementation of the EU General Data Protection Regulation, Europe is immersed in a digital market strategy that is giving rise to a host of new, interconnected regulation. Among this complexity resides the proposed Artificial Intelligence Act. Originally presented by the European Commission April 2021, the AI Act is no…
…
continue reading

1
What the 2022 midterm election results mean for US privacy law
38:39
38:39
Play later
Play later
Lists
Like
Liked
38:39The highly anticipated mid-term elections in the U.S. so far have provided surprising results. Many political pundits expected a “red wave” of Republican candidates to take over both chambers of U.S. Congress. Though control of Congress is still up in the air, Democrats fared better than most expected. With some of the dust now settled, what do the…
…
continue reading

1
On the need for intimate privacy - A chat with Danielle Citron
53:56
53:56
Play later
Play later
Lists
Like
Liked
53:56As we round out 2022, digital technology is further embedding itself into our daily lives. Beyond the smartphone’s ubiquity, wearable sensors proliferate and are found everywhere from the gym to the bedroom. Intimate relationships are formed through dating apps more than ever before. We’re tracked in our cars, in retail establishments and online. A…
…
continue reading

1
A chat with U.K. Information Commissioner John Edwards
30:28
30:28
Play later
Play later
Lists
Like
Liked
30:28Since becoming U.K. Information Commissioner, John Edwards has been busy. Officially taking the reigns January 4, Edwards embarked on a listening tour to learn the ins and outs of the U.K. The former New Zealand Privacy Commissioner gave his first major public speech since heading up the ICO at the IAPP Data Protection Intensive in London last mont…
…
continue reading

1
Children's privacy and safety: A conversation with Kalinda Raina
39:49
39:49
Play later
Play later
Lists
Like
Liked
39:49In 1998, the U.S. was the first nation to enact a privacy law specifically tailored to protect children’s data. Nearly 25 years later, COPPA – the Children’s Online Privacy Protection Act – is one of several children’s privacy and data protection laws around the world. LinkedIn Vice President and Chief Privacy Officer Kalinda Raina first encountere…
…
continue reading

1
Talking Strategic Privacy by Design with Jason Cronk
56:56
56:56
Play later
Play later
Lists
Like
Liked
56:56The concept of privacy and data protection by design is not new in the privacy world. We know that privacy should be integrated in the foundational design of a product or service; that is should be baked in, not bolted on. But what that means in practice is often elusive. In 2018, Enterprivacy Consulting Group founder Jason Cronk wrote the book Str…
…
continue reading

1
A chat with Neil Richards on 'Why Privacy Matters'
56:05
56:05
Play later
Play later
Lists
Like
Liked
56:05It’s difficult to remember a time when people didn’t extoll cliches like “privacy is dead” or “data is the new oil.” No doubt, privacy is constantly challenged by ever advancing technology, and data is mined ubiquitously for its value, but privacy is far from dead. Washington University in St. Louis School of Law Prof. Neil Richards agrees, but not…
…
continue reading

1
From the AI Act to the DSA: Catching up on the EU's digital agenda
48:07
48:07
Play later
Play later
Lists
Like
Liked
48:07Though many privacy pros are still grappling with the EU General Data Protection Regulation, the EU is now busy leading a new generation of data regulations. As part of its Digital Single Market strategy, the EU is looking to not only protect data but also to create frameworks that allow for data flows, while aiming to mitigate hate speech and misi…
…
continue reading

1
A chat with Jim Dempsey about ‘Cybersecurity Law Fundamentals’
56:26
56:26
Play later
Play later
Lists
Like
Liked
56:26Cybersecurity is inextricably connected to privacy in countless ways. Like privacy law and regulation in the U.S., cybersecurity stands on a patchwork quilt of rules, laws, regulations and court cases. Stanford Cyber Policy Center Senior Policy Advisor Jim Dempsey has been teaching cybersecurity law since 2015 and worked in the area for decades, wh…
…
continue reading

1
Is competition and privacy regulation facing a transformative moment?
52:16
52:16
Play later
Play later
Lists
Like
Liked
52:16Data protection and competition enforcement have been on a collision course in recent years. The Big Tech platforms have amassed powerful market share with vast amounts of user data. This inevitable convergence is shaping up on both sides of the Atlantic. U.S. President Joe Biden has appointed notable antitrust proponents to powerful government pos…
…
continue reading

1
Ohio Lt. Governor Jon Husted discusses the state's privacy bill
25:00
25:00
Play later
Play later
Lists
Like
Liked
25:00On July 13, Ohio Lt. Governor Jon Husted announced the introduction of the Ohio Personal Privacy Act. The law applies to organizations doing business in Ohio or whose products or services target consumers in the state. Businesses with annual gross revenues exceeding $25 million, or process personal data of 100,000 or more Ohio consumers, or derive …
…
continue reading

1
The rise of the voice-intelligence industry: A discussion with Joseph Turow
58:41
58:41
Play later
Play later
Lists
Like
Liked
58:41Voice-activated products and services are proliferating, while voice-recognition technology is on the rise. In addition to popular voice-activated assistants, call centers are beginning to use advanced voice-intelligence technology in novels ways. The technology could lead to plenty of innovation, but the potential privacy, safety and fairness issu…
…
continue reading

1
Rethinking notice and consent - A chat with Jen King
46:31
46:31
Play later
Play later
Lists
Like
Liked
46:31Notice and consent have been foundational principles in privacy and data protection for decades. But do they provide individuals with the ability to make informed decisions as they navigate products and services? Will laws like the California Privacy Rights Act help change how companies design their privacy notices? For Jennifer King, the Privacy a…
…
continue reading

1
Rep. Suzan DelBene on the need for a federal US privacy law
40:07
40:07
Play later
Play later
Lists
Like
Liked
40:07Prospects for a federal privacy law in the U.S. ramped up in recent years, but even though data protection is a bipartisan issue, nothing has come close to passing. At the same time, U.S. state activity is swarming, and many countries around the world are developing and implementing their own national privacy laws. So what’s it going to take for th…
…
continue reading

1
Exploring emotion-detection technology: A conversation with Ben Bland
42:01
42:01
Play later
Play later
Lists
Like
Liked
42:01Artificial intelligence and machine learning technologies are rapidly developing across virtually all sectors of the global economy. One nascent field is empathic technology, which, for better or worse, includes emotion detection. It is estimated that the emotion detection industry could be worth $56 billion by 2024. However, judging a person's emo…
…
continue reading

1
US government surveillance, global data flows and the Russia investigation: A chat with April Doss
47:40
47:40
Play later
Play later
Lists
Like
Liked
47:40U.S. government surveillance bubbled back up in headlines in recent weeks. Portugal's data protection authority halted transfers of data to the U.S. after complaints that census data were being sent back to the U.S. The same week, a U.S. Foreign Intelligence Surveillance Court decision was published, in which it renewed a U.S. surveillance program …
…
continue reading

1
A discussion about 'dark patterns' with Finn Myrstad
54:45
54:45
Play later
Play later
Lists
Like
Liked
54:45The Norwegian Consumer Council made waves in early 2021 after its complaint to Norway's data protection authority, Datatilsynet, against Grindr resulted in an intention to fine the company $12 million, the highest fine ever levied by the nation’s DPA. Grindr responded to the proposed enforcement action, arguing it has refined its consent mechanism,…
…
continue reading

1
Is a 'multilateral privacy treaty' the answer to 'Schrems II'?
41:00
41:00
Play later
Play later
Lists
Like
Liked
41:00In the wake of "Schrems II," the future of data transfers is on shaky ground. True, the Biden administration has demonstrated that it’s taking trans-Atlantic data flows seriously after appointing Christopher Hoff in January, not long after Biden was inaugurated. And though both the U.S. Department of Commerce and European Commission are working tog…
…
continue reading

1
The Privacy Advisor Podcast: All things Virginia Consumer Data Protection Act with Odia Kagan
47:22
47:22
Play later
Play later
Lists
Like
Liked
47:22Virginia joined rarified air March 2 after its governor signed the Consumer Data Protection Act into law. Though California was the first state to pass baseline privacy legislation, Virginia was the first to do so absent a ballot initiative. So, what is in Virginia’s CDPA? Where does it overlap with provisions in the California Consumer Privacy Act…
…
continue reading

1
The Privacy Advisor Podcast: Privacy engineering and design with Nishant Bhajaria
49:55
49:55
Play later
Play later
Lists
Like
Liked
49:55Concepts like “privacy engineering” and “privacy by design” have been in the privacy lexicon for several years, but do we all know or agree about what they mean? What is a privacy engineer? Sure, when we discuss privacy by design, we’re talking about baking privacy considerations in from the start and not just bolting them on after a product or ser…
…
continue reading

1
What's ahead for U.S. state privacy legislation in 2021?
45:42
45:42
Play later
Play later
Lists
Like
Liked
45:42With 2020 finally in the rearview mirror, 2021 looks like it will be filled with potential data privacy legislation in the U.S. Of course, front and center right now resides the Washington Privacy Act, but the Pacific Northwest state isn't the only one in play. So far, legislation has been proposed in Connecticut, Minnesota, New York, Oklahoma and …
…
continue reading

1
Privacy in 2020: A year in review with IAPP's Omer Tene and Caitlin Fennessy
58:54
58:54
Play later
Play later
Lists
Like
Liked
58:54It goes without saying 2020 has been a challenging and difficult year. COVID-19 has affected the world in inalterable ways. And though the pandemic is a sea change for how we live, work and educate our children, it did not lessen the impact of privacy and the privacy profession. In fact, privacy has become an even more front-and-center issue for bu…
…
continue reading

1
The Privacy Advisor Podcast: Carissa Véliz on privacy, AI ethics and democracy
56:35
56:35
Play later
Play later
Lists
Like
Liked
56:35Artificial intelligence, big data and personalization are driving a new era of products and services, but this paradigm shift brings with it a slate of thorny privacy and data protection issues. Ubiquitous data collection, social networks, personalized ads and biometric systems engender massive societal effects that alter individual self-determinat…
…
continue reading

1
The Privacy Advisor Podcast: A chat with Alastair Magtaggart on Prop 24
45:37
45:37
Play later
Play later
Lists
Like
Liked
45:37Hard to believe it, but we’re only days away from a fateful vote in California on what’s called Proposition 24. If approved by the residents of California, Prop 24 will put the California Privacy Rights Act on the books. The law will add an additional layer of privacy protections for California residents and a new privacy compliance regime for busi…
…
continue reading

1
The Privacy Advisor Podcast: How to know who's tracking your data
38:06
38:06
Play later
Play later
Lists
Like
Liked
38:06As a consumer, it can be really difficult to figure out who's tracking your data online. Many companies hide behind algorithms claiming they're the "secret sauce" to their business model, which sometimes frustrates regulators and laymen alike. That's why award-winning journalist Julia Angwin and investigative journalist Surya Mattu, both of the non…
…
continue reading